AI analysis
CVE-2026-85863 is a use-after-free (CWE-416) in the Windows Clipboard User Service. An attacker who already has a low-privileged local account can trigger the flaw without user interaction; complexity is rated high, but success yields elevated privileges with high impact on confidentiality, integrity, and availability, and the scope is changed. Microsoft assigned it CVSS 3.1 7.8 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H). It affects Windows systems that include this service; specific version ranges were not listed in the provided data, and it is tied to the October 2026 Patch Tuesday cycle. It is not on the CISA KEV list, and no public proof-of-concept is known.
What to do: Install Microsoft's October 2026 Patch Tuesday security updates for Windows as soon as they are available for your builds. Until then, treat this as a local elevation risk: restrict who can log on interactively or via remote desktop, and prefer least-privilege accounts. No public workaround or proof-of-concept is indicated in the advisory data.
Affected
| Microsoft Windows Clipboard User Service | — |
Estimated exposure
massHundreds of millions of Windows installations potentially in scope (exact vulnerable builds not stated) — Windows runs on well over a billion PCs and servers, and Clipboard User Service is a standard component of modern Windows; the advisory does not name builds, so the vulnerable subset is an order-of-magnitude estimate rather than a counted…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.