CVE Catalog
CVE-2026-20936
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.44%
36th percentile - higher than 36% of all known CVEs
Summary
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information via a physical attack.
Risk Assessment
Risk of information disclosure through physical access to the system, potentially leading to data leakage.
Recommendation
Apply the security update from Microsoft for the NDIS component and restrict physical access to systems.
Original NVD description (English source)
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.