CVE-2026-20853
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A race condition vulnerability in Windows WalletService allows an unauthorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain elevated privileges, potentially leading to system takeover.
Recommendation
Install the latest security updates from Microsoft for Windows WalletService.
Other vulnerabilities in Windows WalletService
See all- CVE-2026-49176High
Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.
- CVE-2021-26885High
Elevation of privilege vulnerability in Windows WalletService. An attacker could exploit it to gain elevated privileges on the system.
- CVE-2021-26871High
Elevation of privilege vulnerability in Windows WalletService. An attacker could exploit it to gain elevated privileges on the system.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows WalletService allows an unauthorized attacker to elevate privileges locally.