Home / CVE DB / CVE-2026-20815
Standard
Vulnerability Identifier

CVE-2026-20815

2026-01-13
Severity Assessment
7.0
HIGH
CVSS v3.x Score
Clinical Analysis (Description)

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

Vector Sequencing

Attack Parameters

Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Impact Consequences

Technical Impact

Unchanged
Scope
High
Confidentiality
High
Integrity
High
Availability
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Classification

CWE-CWE-362

Affected Population

Affected Configurations

Total: 55 detected entries

Software List Scrollable
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.7623
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.6563
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.4652
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.6899
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.4061
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.3981
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.4061
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.3194
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.6508
mi
windows_11_25h2
Vendor: microsoft • v10.0.26200.7171
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.3403
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.7171
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.2314
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.4851
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.2314
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.4270
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.3981
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.2605
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.4270
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.2033
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.2033
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.6899
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.2454
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.3775
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.4652
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.3781
mi
windows_11_25h2
Vendor: microsoft • v10.0.26200.7092
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.6508
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.4946
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.4066
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.1742
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.3476
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.2161
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.7092
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.3775
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.4656
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.2894
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.4851
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.4349
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.3194
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.3107
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.3403
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.6584
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.6584
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.3107
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.3476
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.7171
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.7092
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.6905
mi
windows_11_25h2
Vendor: microsoft • v10.0.26200.6899
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.2605
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.4946
mi
windows_11_24h2
Vendor: microsoft • v10.0.26100.6563
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.2894
mi
windows_server_2025
Vendor: microsoft • v10.0.26100.4349
Timeline

Time Line

PUBLICATION
13 Jan 2026
MODIFICATION
14 Jan 2026
Impact Statistics

Key Metrics

CVSS Score
7.0
HIGH
Products
55
Affected
Articles
1
Published
Remediation Protocol

Recommended Solution

No automatic solution found. Check vendor references.
Patch Library
No direct patch listed in database.
Associated Cyber Intelligence

Related News Articles

1 article(s) mentioning this vulnerability

Article #1

Microsoft Windows Security Update Advisory: Multiple Vulnerabilities Identified

Microsoft Windows faces multiple critical vulnerabilities, including CVE-2026-20805, which could lead to remote code execution and privilege escalation. Immediate action…

9
20 Jan 2026 vulnerability CRITICAL
Recommended Actions for Administrators

Immediate Action Plan

1. Inventory

Identify all affected systems in your infrastructure.

2. Assessment

Assess exposure and criticality for your organization.

3. Mitigation

Apply patches or available workarounds.

4. Verification

Test and confirm effectiveness of applied measures.