CVE Catalog
CVE-2026-20821
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk0.69%
49th percentile - higher than 49% of all known CVEs
Summary
An exposure of sensitive information in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.
Risk Assessment
An attacker could obtain confidential data such as credentials or configuration details, facilitating further attacks.
Recommendation
Install the Windows security update and monitor RPC logs for suspicious activity.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.