CVE-2026-20830

Katalog CVE

CVSS 7.0 · High EPSS 0,29%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada microsoft windows server 2025. Skor CVSS 3.1 7.0 (High) menurut microsoft.com.

Deskripsi (NVD)

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

Rincian

Terbit di NVD

13 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.0 (High), sumber microsoft.com
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-416: Use After Free

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 20,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20830 advisory vendor