CVE-2026-20840

HighCVSS 7.8

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.42%

90th percentile - higher than 90% of all known CVEs

A heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

An authorized attacker can execute arbitrary code in kernel context, potentially leading to full system compromise.

Install the latest Windows security updates from Microsoft.

Original NVD description (English source)

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.