CVE-2026-20847

MediumCVSS 6.5

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.30%

68th percentile - higher than 68% of all known CVEs

Summary

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.

Risk Assessment

An authorized user could exploit this vulnerability to impersonate another system or user, potentially leading to privilege escalation and unauthorized data access.

Recommendation

Install the latest Windows security updates that address this vulnerability in the Windows Shell component.

Original NVD description (English source)

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.