PT-2026-112848 · Microsoft · Windows 11 Version 24H2+4

CVE-2026-85910

·

Published

2026-10-13

·

Updated

2026-10-13

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.

Fix

Buffer Over-read

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2026-85910

Affected Products

Windows 11 Version 24H2
Windows 11 Version 25H2
Windows 11 Version 26H2
Windows 11 Version 26H1
Windows Server 2025