CVE Catalog
CVE-2026-20827
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.63%
47th percentile - higher than 47% of all known CVEs
Summary
An exposure of sensitive information in the Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker could read confidential data related to the user interface, compromising privacy or enabling further attacks.
Recommendation
Apply the Microsoft security update and monitor TWINUI subsystem activity.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally.