CVE-2026-85884

Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability

HIGH 7.8EPSS 0.4%

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

Affected: Microsoft · Windows 11 Version 24H2 · Windows 11 Version 25H2 · Windows 11 version 26H1 · Windows 11 Version 26H2
CVSS v3.1 MICROSOFT: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.39% chance of exploitation in the next 30 days, 32nd percentile
Published: 2026-10-13
Updated: 2026-10-16

Proof-of-concept exploits (1)

Beardhammer/CVE-2026-8588433★ · 2026-10-13

References

CVE Record
NVD entry