7.0
High
CVE-2026-85879 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to…
Description
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Subsystem for Linux (WSL2) 2.7 | earliest → < 2.7.10 | 2.7.10 |
References
- Windows Subsystem for Linux Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Subsystem for Linux (WSL2)
The 8 CVEs of Windows Subsystem for Linux (WSL2) →
CVE-2026-102204
Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized…
7.8
High
CVE-2026-96206
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information…
6.5
Medium
CVE-2026-57973
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to…
6.3
Medium
CVE-2026-57968
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally
7.8
High