CVE-2026-20860

HighCVSS 7.8

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.98%

94th percentile - higher than 94% of all known CVEs

Summary

A type confusion vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized attacker can elevate their privileges on the system, potentially leading to full system control.

Recommendation

Install the latest Windows security updates from Microsoft.

Original NVD description (English source)

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.