CVE-2026-85880Vulnerability

1. “CVE-2026-85880”

   VolexityVendor16 Oct 2026
   Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP

2. “CVE-2026-85880”

   Recorded FutureVendor13 Oct 2026
   September 2026 CVE Landscape

3. “Despite this massive number, only two, CVE-2026-85880 and CVE-2026-81963, were reported Known Exploited and none were Publicly Disclosed.”

   Help Net SecurityNews9 Oct 2026
   October 2026 Patch Tuesday forecast: Time for an Office cleanup

4. “… chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break out of the browser's sandbox and achieve remote code execution.”

   The Hacker NewsNews23 Sep 2026
   Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

5. “… the simultaneous use of multiple chained zero-day exploits in Google Chrome (CVE-2026-85046, CVE-2026-87491) and Microsoft Windows (CVE-2026-85880) by two different Chinese advanced persistent threat (APT) actors.”

   VolexityVendor21 Sep 2026
   Mind the (Patch) Gap, Part 2: Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits

6. “CVE-2026-85880 -- Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability”

   Sophos X-OpsVendor16 Sep 2026
   September Patch Tuesday haul includes 973 CVEs

7. “CVE-2026-85880 and CVE-2026-81963 both allow local attackers to elevate privileges to SYSTEM, while 20 additional flaws could enable unauthenticated remote code execution without user interaction.”

   Check Point ResearchVendor14 Sep 2026
   14th September – Threat Intelligence Report

8. “The first V8 vulnerability is tracked as CVE-2026-85046, and the Windows bug is tracked as CVE-2026-85880.”

   ProofpointVendor9 Sep 2026
   Four groups caught using the same Chrome and Windows exploit kit

9. “… include: CVE-2026-85046 and CVE-2026-87491, remote-code execution defects in the JavaScript engine for Chromium-based browsers; and CVE-2026-85880, a privilege-escalation zero-day that Microsoft disclosed Tuesday in Windows Advanced Local Procedure Call.”

   ProofpointVendor9 Sep 2026
   Chinese espionage groups swarm to exploit triple-link chain of zero-days

10. “It then exploits a third vulnerability in the Windows kernel (CVE-2026-85880) to escape Chrome’s sandboxed renderer process and inject code into the Chrome browser process.”

    VolexityVendor9 Sep 2026
    Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows

11. “The first of these is CVE-2026-85880, assigned a high severity rating of 7.8.”

    Infosecurity MagazineNews9 Sep 2026
    Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026

12. “CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability”

    Risky Business NewsNews9 Sep 2026
    Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal

13. “CVE-2026-85880”

    JPCERT/CC alertsGovernment9 Sep 2026
    Security Alert: Microsoft Releases September 2026 Security Updates

14. “CVE-2026-85880 affects Windows Advanced Local Procedure Call (ALPC).”

    Cisco TalosVendor8 Sep 2026
    Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

15. “There are two “zero-day” flaws fixed this month that are being actively exploited: both CVE-2026-81963 and CVE-2026-85880 allow an attacker to elevate their privileges on Windows system.”

    Krebs on SecurityNews8 Sep 2026
    Microsoft Plugs Nearly 1,000 Security Holes

16. “CVE-2026-85880: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability”

    Qualys Threat ResearchVendor8 Sep 2026
    Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review

17. “Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)”

    TenableVendor8 Sep 2026
    Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

• chinadigitaltimes[.]topin 2 reports
• americanprgoress[.]topin 2 reports
• thecovnresation[.]comin 2 reports
• cloud.shinewrist[.]netin 2 reports
• idscan[.]netin 1 report

Also named with it: CVE-2026-81963, CVE-2026-85046, CVE-2026-87491, CVE-2026-69730, CVE-2026-69829, CVE-2026-86060, CVE-2026-69676, CVE-2026-69525, CVE-2026-85706, CVE-2026-67276, CVE-2026-86218, CVE-2026-75650, CVE-2026-86950, CVE-2026-60004, CVE-2026-58231