Skip to content
ThreatCluster

Critical Elevation of Privilege Vulnerabilities in Windows 11 and 10

First seen 14 Sep 2026, 22:23 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 14, 2026 at 23:21 UTC
  • •Critical elevation of privilege vulnerabilities identified in Windows 11 and 10.
  • •CVE-2026-62721 and CVE-2026-85921 are the key vulnerabilities addressed.
  • •Updates released today include fixes for Remote Desktop Services and USB audio issues.

Microsoft has released out-of-band security updates for Windows 11 (versions 24H2, 25H2, and 26H1) and Windows 10 (version 1809) to address critical elevation of privilege vulnerabilities. The updates include protections for CVE-2026-62721, a Windows User-Mode Power Service vulnerability published on August 11, 2026, and CVE-2026-85921, a Windows Secure Kernel Mode vulnerability published today. Affected systems may experience instability in Remote Desktop Services (RDS) and issues with USB Audio Class 1.0 devices. The updates also address known issues related to Hyper-V and audio functionalities. Administrators are urged to apply these updates promptly to mitigate potential exploitation risks. Microsoft is actively monitoring the situation and has provided guidance on known issues and fixes.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-11
CVE-2026-62721 published
Microsoft disclosed a Windows User-Mode Power Service elevation of privilege vulnerability affecting Windows 11.
support.microsoft.com
2026-09-14
CVE-2026-85921 published
Microsoft disclosed a Windows Secure Kernel Mode elevation of privilege vulnerability affecting Windows 11.
support.microsoft.com
2026-09-14
Security updates released
Microsoft released out-of-band updates for Windows 11 and Windows 10 to address critical vulnerabilities.
support.microsoft.com

More articles in this cluster (3)

Following this threat?

Track CVE-2026-62721 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3