CVE-2026-32220
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
An improper access control vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
Risk Assessment
An attacker with local access can bypass VBS protection mechanisms, potentially leading to privilege escalation or data integrity compromise.
Recommendation
Apply the security update from Microsoft that addresses this access control vulnerability in VBS Enclave.
Other vulnerabilities in Windows VBS Enclave
See all- CVE-2026-83501Medium
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
- CVE-2026-83498High
Vulnerability involving untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-20938High
An untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS