CVE-2026-85359 [HIGH] – Improper control of generation of code (‘code injection’) in Windows Performance Monitor a

Improper control of generation of code (‘code injection’) in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.