CVE-2026-20835
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential reading of sensitive system data by an authorized user with local access.
Recommendation
It is recommended to apply the latest security updates and monitor access to the camsvc service.
Other vulnerabilities in Capability Access Management Service (camsvc)
See all- CVE-2026-20851Medium
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.
- CVE-2026-20815High
A race condition exists in the Capability Access Management Service (camsvc) due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS