CVE Catalog
CVE-2026-20809
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.36%
29th percentile - higher than 29% of all known CVEs
Summary
A time-of-check time-of-use (TOCTOU) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain elevated privileges, potentially leading to system takeover.
Recommendation
Install the latest security updates from Microsoft for the Windows kernel.
Other vulnerabilities in Windows Kernel Memory
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS