{"vulnerability": "CVE-2026-85849", "sightings": [{"uuid": "5dbfd351-ce62-45eb-b80e-e71344c0a8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85849", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "content": "", "creation_timestamp": "2026-10-13T11:56:15.000000Z"}, {"uuid": "0782a57b-4847-4d40-8d2e-e8d9d05d9e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85849", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117438099089000752", "content": "CVE-2026-85849 Windows AppX Deployment Service Elevation of Privilege Vulnerability Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85849https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85849#Microsoft #Windows10Version1607 #Windows10Version1809 #Windows10Version21H2 #Windows10Version22H2 #Windows11version23H2 #Windows11Version23H2 #Windows11Version24H2 #Windows11Version25H2 #Windows11version26H1 #Windows11Version26H2 #WindowsServer2016 #WindowsServer2016(ServerCoreinstallation) #WindowsServer2019 #WindowsServer2019(ServerCoreinstallation) #WindowsServer2022 #WindowsServer2025 #WindowsServer2025(ServerCoreinstallation)#CVE_2026_85849#bot", "creation_timestamp": "2026-10-14T07:33:02.848991Z"}, {"uuid": "8f8407da-cb09-4abe-bad6-4e67518ec2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85849", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "content": "", "creation_timestamp": "2026-10-14T01:49:33.000000Z"}]}