Description
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
Published: 2026-10-13
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: Local privilege escalation
Action: Apply patch promptly
AI Analysis

Impact

The CVE outlines a use‑after‑free flaw in the Windows Camera Frame Server Monitor component that lets an authorized local user elevate privileges. The vulnerability permits the attacker to execute code with higher rights than the original local account, potentially enabling malicious actions that require elevated privileges.

Affected Systems

Microsoft Windows 11 releases 23H2, 24H2, 25H2, 26H2, and 26H1, as well as Windows Server 2025 (default and Server Core installations).

Risk and Exploitability

The CVSS score of 7 indicates a moderate‑to‑high severity. EPSS is not available, and the vulnerability has not been listed in the CISA KEV catalog, so no confirmed exploitation has been documented. The flaw requires an authorized local user to trigger the exploit, implying a local attack vector. Given the use‑after‑free weakness (CWE‑416) the potential for privilege escalation is significant.

Generated by OpenCVE AI on October 17, 2026 at 00:00 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the Microsoft update that contains the fix for CVE‑2026‑85803.
  • Temporarily disable the Camera Frame Server Monitor service on affected machines until the patch is available.
  • Restrict local user accounts to the minimum privileges needed to limit the impact of a potential local compromise.

Generated by OpenCVE AI on October 17, 2026 at 00:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 25 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft windows Server 2025 (server Core Installation)
Vendors & Products Microsoft windows Server 2025 (server Core Installation)

Fri, 16 Oct 2026 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft windows 11 23h2
Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1
Microsoft windows 11 26h2
CPEs cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_26h2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_26h2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*
Vendors & Products Microsoft windows 11 23h2
Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1
Microsoft windows 11 26h2

Tue, 13 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Description Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
Title Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
First Time appeared Microsoft
Microsoft windows 11 23h2
Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1
Microsoft windows 11 Version 26h2 For Arm64-based Systems
Microsoft windows Server 2025
Weaknesses CWE-416
CPEs cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft windows 11 23h2
Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1
Microsoft windows 11 Version 26h2 For Arm64-based Systems
Microsoft windows Server 2025
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Windows 11 23h2 Windows 11 23h2 Windows 11 24h2 Windows 11 24h2 Windows 11 25h2 Windows 11 25h2 Windows 11 26h1 Windows 11 26h1 Windows 11 26h2 Windows 11 Version 26h2 For Arm64-based Systems Windows Server 2025 Windows Server 2025 (server Core Installation)
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-10-31T18:04:37.001Z

Reserved: 2026-09-04T18:08:54.993Z

Link: CVE-2026-85803

cve-icon Vulnrichment

Updated: 2026-10-13T20:10:47.079Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-13T19:21:04.333

Modified: 2026-10-16T17:44:32.693

Link: CVE-2026-85803

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-25T00:30:04Z

Weaknesses