CVE-2026-85884
HighPublished
Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability
- Published
- Oct 13, 2026
- Updated
- Oct 31, 2026
- Assigning CNA
- microsoft
- Evidence observed
- Nov 4, 2026
Primary CVSS
7.8/ 10High
nvd · CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H0.4%
Low · next 30 days
- Percentile
- 38.0%
- Model date
- Nov 2, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
Sources
PowerShell proof-of-concept demonstrating CVE-2026-85884, a Windows whesvc/WinDiag Lua ETW privilege escalation from low-privileged or WPAD LPAC code to SYSTEM.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.