CVE Catalog
CVE-2026-32220
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
An improper access control vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
Risk Assessment
An attacker with local access can bypass VBS protection mechanisms, potentially leading to privilege escalation or data integrity compromise.
Recommendation
Apply the security update from Microsoft that addresses this access control vulnerability in VBS Enclave.
Original NVD description (English source)
Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.