For informational purposes only.

Vulnerability type: LPE
Affected versions:
- Windows 10 1607/1809/21H2/22H2
- Windows Server 2012–2022

The vulnerability is a privilege escalation issue in Windows Advanced Local Procedure Call (ALPC). The flaw is related to a heap-based buffer overflow in the Windows Advanced Local Procedure Call (ALPC) subsystem, allowing an authorized attacker to perform operations locally to escape a sandbox (for example, from an AppContainer) and escalate privileges, potentially obtaining SYSTEM privileges.

According to the seller, the exploit automatically determines the OS version and calculates kernel offsets to replace the token. Stable operation on 24H2+ builds is claimed.

Price: $20K

A seller offers a 1-day Windows LPE exploit for CVE-2026-85880, abusing an ALPC heap buffer overflow to escape AppContainer sandboxes and gain SYSTEM privileges for $20K.

Sale of a 1-day exploit for the Windows operating system (CVE-2026-85880)