CVE-2026-20935

Medium · 6.2

CVSS

6.2

EPSS

0.4%

Published

Jan 13, 2026

CISA due date

—

The record

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.

Ecosystem	Package	Introduced	Fixed