CVE-2026-85877 - Windows Print Spooler Remote Code Execution Vulnerability

HIGH

Windows Print Spooler Remote Code Execution Vulnerability

Published Sep 8, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.82%

Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
10.0.26100.0	affected	<10.0.26100.9445

No remediation recorded yet.

Weaknesses (1)

CWE-122

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85877		vendor-advisorypatchVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner microsoft

Published Sep 8, 2026

Updated Oct 1, 2026

Reserved Sep 4, 2026

Updated Sep 8, 2026

Status Analyzed

Modified Sep 9, 2026

Severity n/a

Public date n/a