CVE-2026-20836
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A race condition exists in the Graphics Kernel due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can escalate privileges, potentially gaining control over sensitive system resources.
Recommendation
Apply the security update from Microsoft for the Graphics Kernel.
Other vulnerabilities in Graphics Kernel
See all- CVE-2026-50296High
A use-after-free vulnerability exists in the Graphics Kernel. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20814High
A race condition exists in the Graphics Kernel due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.