← Database

CVE-2026-85359

HIGH CVSS: 7.8 Published: 2026-10-13 Modified: 2026-10-13

Description

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

Affected Platforms

Unknown

Weakness Type

CWE-94

References