CVE-2026-85893

high

EUVD alias: EUVD-2026-80051

Assigned by CNA: microsoft

Published 2026-09-15 · Modified 2026-09-15

Discuss on Community Propose mitigation

CVSS v3

8.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CVSS v4 NEW

—

not yet in upstream

VIR risk

8.8

Description

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Predictions

Exploit likelihood

92%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Microsoft Security Response Center · View original ↗ · proprietary-no-redistribution

Full prose not cached — VIR stores only structured fields (affected/fixed versions, references) for this source. Click "View original" above for the vendor's full advisory.

Affected

Vendor	Product	Version
microsoft	Windows Server 2012
microsoft	Windows Server 2012 (Server Core installation)
microsoft	Windows Server 2012 R2
microsoft	Windows Server 2012 R2 (Server Core installation)
microsoft	Microsoft Excel 2016 (32-bit edition)
microsoft	Microsoft Excel 2016 (64-bit edition)
microsoft	Microsoft PowerPoint 2016 (32-bit edition)
microsoft	Microsoft PowerPoint 2016 (64-bit edition)
microsoft	Microsoft Word 2016 (32-bit edition)
microsoft	Microsoft Word 2016 (64-bit edition)
microsoft	Microsoft Publisher 2016 (32-bit edition)
microsoft	Microsoft Publisher 2016 (64-bit edition)
microsoft	Microsoft Access 2016 (32-bit edition)
microsoft	Microsoft Access 2016 (64-bit edition)
microsoft	Microsoft Office 2016 (32-bit edition)
microsoft	Microsoft Office 2016 (64-bit edition)
microsoft	Microsoft Outlook 2016 (32-bit edition)
microsoft	Microsoft Outlook 2016 (64-bit edition)
microsoft	Windows Server 2016
microsoft	Office Online Server
microsoft	Windows 10 Version 1607 for 32-bit Systems
microsoft	Windows 10 Version 1607 for x64-based Systems
microsoft	Windows Server 2016 (Server Core installation)
microsoft	Microsoft SQL Server 2017 for x64-based Systems (GDR)
microsoft	Windows 10 Version 1809 for 32-bit Systems
microsoft	Windows 10 Version 1809 for x64-based Systems
microsoft	Windows Server 2019
microsoft	Windows Server 2019 (Server Core installation)
microsoft	Microsoft Office 2019 for 32-bit editions
microsoft	Microsoft Office 2019 for 64-bit editions

OS impact

Windows Affected 1 release

Version	Status	Fixed in
—	Affected	—

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85893

CWEs

CWE-416

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.