cve detail

CVE-2026-20805

naam

Microsoft Windows Information Disclosure Vulnerability

Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.

KEV

bekend misbruikt

EPSS

3,3%

percentiel

87%

vendor

Microsoft

product

Windows

toegevoegd aan KEV

13 jan 2026

due date

03 feb 2026

ransomware

Unknown

CWE

CWE-200

EPSS datum

12 mei 2026

aanbevolen actie

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

notities

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20805 ; https://nvd.nist.gov/vuln/detail/CVE-2026-20805