CVE-2026-85842High· 7.8▾ TwilightUse of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-33210Critical· 9.1Ruby JSON is a JSON implementation for Ruby
CVE-2026-94520Medium· 4.9Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-83585High· 7.8Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2025-48826High· 8.8A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912
CVE-2026-76753Critical· 9.8A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory
CVE-2026-14157Critical· 9.4Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface.