CVE-2026-85929
Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges l
CVSS
7.8
High
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-732
Not enough EPSS history yet.
Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1187428.6 HIG—
——0Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.3hCVE-2026-1182887.0 HIG—
——0Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.3hCVE-2026-1057347.0 HIG—
——0Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.4hCVE-2026-145433.9 LOW2.8%
——1The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.17hCVE-2026-129637.4 HIG4.5%
——1A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.17hCVE-2026-1121257.3 HIG2.5%
——1Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.
This issue affects HA Monitor: from 01-00 before 01-83-01.3h