CVE Catalog

CVE-2026-20819

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.55%

43th percentile - higher than 43% of all known CVEs

Summary

An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

Risk Assessment

The risk involves potential disclosure of sensitive data stored in the secure enclave by an authorized user.

Recommendation

It is recommended to apply security patches and verify the integrity of VBS enclaves.

Original NVD description (English source)

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS