CVE-2026-20817

HighCVSS 7.8

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.33%

92th percentile - higher than 92% of all known CVEs

Improper handling of insufficient permissions in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

An attacker with appropriate permissions may gain higher privileges in the system, potentially leading to serious security breaches.

It is recommended to monitor and restrict access to Windows Error Reporting and to regularly update the system to patch this vulnerability.

Original NVD description (English source)

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.