CVE-2026-20832CWE-415

CVE-2026-20832

High · published January 13, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

⚡ A crafty elevation of privilege in Windows RPC could let an attacker take charge of your system's administrative powers! 🔥 Think of it like a hotel guest who finds a way to slip into the restricted staff areas — they could change bookings, access sensitive information, or even delete records without anyone noticing! With this vulnerability, an attacker could potentially elevate their privileges, gaining access to restricted areas of the system. This could lead to unauthorized changes, data breaches, or even complete control over the system, which is absolutely devastating for any organization.

Put simply

Think of it like a hotel guest who finds a way to slip into the restricted staff areas — they could change bookings, access sensitive information, or even delete records without anyone noticing! The vulnerability in the Windows Remote Procedure Call (RPC) Interface Definition Language (IDL) allows attackers to exploit improper handling of user input to gain elevated privileges.

What to do

With this vulnerability, an attacker could potentially elevate their privileges, gaining access to restricted areas of the system. This could lead to unauthorized changes, data breaches, or even complete control over the system, which is absolutely devastating for any organization. To protect against this vulnerability, ensure that your system is updated with the latest security patches. Specifically, check for updates from Microsoft that address CVE-2026-20832. Additionally, review user access privileges to limit exposure. You've got this! By following these steps, you can keep your system secure and maintain your superhero status in the fight against cyber threats! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00478 · 40.3th percentile
Weakness
CWE-415 · Double Free
Published
2026-01-13T23:16Z
Affected products (14)
ProductVersionsFixed in
microsoft/windows_10_1607< 10.0.14393.878310.0.14393.8783
microsoft/windows_10_1607< 10.0.14393.878310.0.14393.8783
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_21h2< 10.0.19044.680910.0.19044.6809
microsoft/windows_10_22h2< 10.0.19045.680910.0.19045.6809
microsoft/windows_11_23h2< 10.0.22631.649110.0.22631.6491
microsoft/windows_11_24h2< 10.0.26100.762310.0.26100.7623
microsoft/windows_11_25h2< 10.0.26200.762310.0.26200.7623
microsoft/windows_server_2016< 10.0.14393.878310.0.14393.8783
microsoft/windows_server_2019< 10.0.17763.827610.0.17763.8276
microsoft/windows_server_2022< 10.0.20348.464810.0.20348.4648
microsoft/windows_server_2022_23h2< 10.0.25398.209210.0.25398.2092
microsoft/windows_server_2025< 10.0.26100.3223010.0.26100.32230
References (1)
EPSS history
Timeline
  • 13 JAN 17:56Z
    Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability
    cvelistv5