CVE-2026-20935
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
Risk Assessment
Risk of information leakage from the secure VBS enclave by an unauthorized local user, potentially compromising data protection.
Recommendation
Apply the security update from Microsoft for the VBS Enclave component.
Other vulnerabilities in Windows Virtualization-Based Security (VBS) Enclave
See all- CVE-2026-20876Medium
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-20819Medium
An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS