CVE-2026-20876
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Risk Assessment
The risk involves potential privilege escalation by an authorized user, which could lead to full system compromise.
Recommendation
It is recommended to immediately apply security updates and restrict local privileges.
Other vulnerabilities in Windows Virtualization-Based Security (VBS) Enclave
See all- CVE-2026-20935Medium
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
- CVE-2026-20819Medium
An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS