CVE-2026-20936
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information via a physical attack.
Risk Assessment
Risk of information disclosure through physical access to the system, potentially leading to data leakage.
Recommendation
Apply the security update from Microsoft for the NDIS component and restrict physical access to systems.
Other vulnerabilities in Windows NDIS
See all- CVE-2026-69396High
A use-after-free vulnerability in Windows NDIS allows an authorized attacker to elevate privileges over a network. The issue stems from using memory after it has been freed.
- CVE-2026-69357High
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS