CVE-2026-20824

Medium · 5.5

CVSS

5.5

EPSS

0.9%

Published

Jan 13, 2026

CISA due date

—

The record

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.

Ecosystem	Package	Introduced	Fixed