CVE-2026-20819
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential disclosure of sensitive data stored in the secure enclave by an authorized user.
Recommendation
It is recommended to apply security patches and verify the integrity of VBS enclaves.
Other vulnerabilities in Windows Virtualization-Based Security (VBS) Enclave
See all- CVE-2026-20935Medium
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
- CVE-2026-20876Medium
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS