CVE-2026-20851
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.
Risk Assessment
The risk involves potential reading of sensitive system data by an unauthorized attacker with local access.
Recommendation
It is recommended to immediately apply security updates and restrict local privileges.
Other vulnerabilities in Capability Access Management Service (camsvc)
See all- CVE-2026-20835Medium
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.
- CVE-2026-20815High
A race condition exists in the Capability Access Management Service (camsvc) due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS