AI analysis
CVE-2026-85861 is a use-after-free (CWE-416) in Microsoft's Windows Clipboard User Service. An attacker who already has local, authorized access can trigger the flaw to elevate privileges; user interaction is not required, but attack complexity is high and the impact spans confidentiality, integrity, and availability with a changed scope (CVSS 3.1 base 7.8). It affects Windows systems that include the Clipboard User Service; the advisory data does not name specific version ranges. Microsoft assigned the CVE, and it is associated with October 2026 Patch Tuesday. It is not listed in CISA's Known Exploited Vulnerabilities catalog, and no public proof-of-concept is known.
What to do: Install Microsoft's October 2026 Patch Tuesday security updates for the affected Windows builds as soon as they are available. Until patched, treat this as a local elevation-of-privilege issue: limit local accounts, and watch for unexpected Clipboard User Service crashes or privilege changes. No public exploit or CISA KEV listing is known.
Affected
| Microsoft Windows Clipboard User Service | — |
Estimated exposure
massOn the order of 100 million to 1 billion+ Windows installations (exact vulnerable builds unknown) — The Clipboard User Service ships with mainstream Windows client and server releases, which public market figures put in the hundreds of millions to over a billion active devices; exact build coverage is not stated, so this is an…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.