CVE-2026-85912
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials can exploit this flaw to elevate privileges, creating a risk of system takeover.
Recommendation
Immediately install Microsoft updates for Windows Clipboard User Service and limit the ability to run untrusted code locally.
Other vulnerabilities in Windows Clipboard User Service
See all- CVE-2026-85863High
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85861High
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83893Medium
A vulnerability in the Windows Clipboard User Service allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.
- CVE-2026-83764Medium
Incorrect authorization in the Windows Clipboard User Service allows an authorized attacker to disclose information locally.
- CVE-2026-50488High
A command injection vulnerability in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS