CVE-2026-85792
Microsoft Windows 10 1607: use-after-free can lead to remote code execution
- Risk score
- 86/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 0.9%
- Published
- 13 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- Affected
- Microsoft Windows 10 1607
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Story map
At a glance
Microsoft Windows 10 1607: Red, act today. Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
The flaws
- CVE-2026-85792: Use-after-free can lead to remote code execution (CVSS 9.8 · EPSS 1%)
- CVE-2026-100202: Use-after-free (CVSS 9.8 · EPSS 1%)
- CVE-2026-100222: Heap buffer overflow (CVSS 9.8 · EPSS 1%)
- CVE-2026-100220: Heap buffer overflow (CVSS 8.8 · EPSS 1%)
The fix
Fix: Apply the vendor's security update; see the linked advisory.
Who is exposed: Microsoft Windows 10 1607
Where it stands
- No known exploitation
Connects to
- Same weakness: Use-after-free (CWE-416). 398 other warnings in 30 days
- Same product: Earlier Microsoft Windows 10 1607 warnings. 324 in the last 90 days
Why it is Red
- CVSS 9.8 critical
- Remotely exploitable without logging in
- On your watchlist: windows server
References
Original description
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Last activity 13 Oct 2026. Patch Forecast updates every hour.