CVE-2026-20817

—

CVSS 3.1

7.8 high

EPSS

5%p92

Published

Jan 13, 2026 (Jan 13, 2026)

Modified

Jul 30, 2026

Description

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Vendors: microsoft
Products: windows 10 21h2, windows 10 22h2, windows 11 23h2, windows 11 24h2, windows 11 25h2, windows server 2022, windows server 2022 23h2, windows server 2025
Weakness: CWE-280
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news2 stories