CVE-2026-20826

HighCVSS 7.8

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

A race condition exists in the Tablet Windows User Interface (TWINUI) Subsystem due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized user could gain elevated privileges, potentially leading to unauthorized access to system functions.

Recommendation

Apply the security patch from the Windows vendor.

Other vulnerabilities in Tablet Windows User Interface (TWINUI) Subsystem

CVE-2026-20827Medium
An exposure of sensitive information in the Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to elevate privileges locally.