CVE-2026-20862
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
An exposure of sensitive information vulnerability in Windows Management Services allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential leakage of configuration data or other sensitive information by an authorized user.
Recommendation
It is recommended to apply the latest security patches and monitor access to management services.
Other vulnerabilities in Windows Management Services
See all- CVE-2026-73012High
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
- CVE-2026-70348Medium
Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.
- CVE-2026-58544High
Use-After-Free vulnerability in Windows Management Services. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-20924High
A use-after-free vulnerability in Windows Management Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-20923High
A use-after-free vulnerability in Windows Management Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-20918High
A race condition exists in Windows Management Services due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20877High
A use-after-free vulnerability exists in Windows Management Services. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20874High
A race condition exists in Windows Management Services due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20873High
A race condition exists in Windows Management Services due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-20867High
A race condition exists in Windows Management Services due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS