OTPulse

Windows Kernel Security Feature Bypass Vulnerability

MonitorCVSS 5.3CVE-2026-85939Oct 13, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorNetwork
Auth RequiredLow
ComplexityHigh
User InteractionNone needed
Summary

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.

What this means
What could happen
Could allow unauthorized modification of device settings or firmware
Who's at risk
Organizations in critical infrastructure using Microsoft equipment
How it could be exploited
Attacker on the corporate network or internet could reach this device with basic access credentials
Exploitability
Unlikely to be exploited - EPSS score 0.4%
Affected products (28)
28 with fix
ProductAffected VersionsFix Status
Windows 10 Version 1809 for 32-bit SystemsAll versionsBuild 10.0.17763.9376
Windows 10 Version 1809 for x64-based SystemsAll versionsBuild 10.0.17763.9376
Windows Server 2019All versionsBuild 10.0.17763.9376
Windows Server 2019 (Server Core installation)All versionsBuild 10.0.17763.9376
Windows Server 2022All versionsBuild 10.0.20348.5761
Remediation & Mitigation
0/1
Long-term hardening
0/1
Exploitation assessment: Exploitation Less Likely. Apply the 2026-Oct security update.
View full vendor advisory
API: /api/v1/advisories/0a5da730-fe95-4623-913b-ce83f4c2be78

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.