CVE-2026-20815
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
A race condition exists in the Capability Access Management Service (camsvc) due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could elevate privileges, potentially leading to unauthorized access to capability management.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Capability Access Management Service (camsvc)
See all- CVE-2026-20851Medium
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.
- CVE-2026-20835Medium
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.