CVE-2026-85863
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the flaw to execute code in the context of the service, potentially leading to privilege escalation and system takeover.
Recommendation
Apply the latest Microsoft Windows security updates.
Other vulnerabilities in Windows Clipboard User Service
See all- CVE-2026-85912High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85861High
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83893Medium
A vulnerability in the Windows Clipboard User Service allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.
- CVE-2026-83764Medium
Incorrect authorization in the Windows Clipboard User Service allows an authorized attacker to disclose information locally.
- CVE-2026-50488High
A command injection vulnerability in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS