VULNERABILITY INTELLIGENCE

CVE-2026-20842

CVSS score7 HIGH

EPSS probability0.39%

CISA KEVNot currently listed

Published2026-01-13

Last modified2026-07-30

Description

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.