CVE-2026-20859
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A use-after-free vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the flaw to execute code in kernel context, potentially gaining full system control.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Windows Kernel-Mode Drivers
See all- CVE-2026-40408High
A use after free vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to locally elevate privileges.
- CVE-2026-34332High
A 'use after free' vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.
- CVE-2026-50396High
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-50393High
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-45600High
Type confusion vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.