CVE-2026-20825

Medium · 4.4

CVSS

4.4

EPSS

0.5%

Published

Jan 13, 2026

CISA due date

—

The record

Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.

Ecosystem	Package	Introduced	Fixed