CVE-2026-20815

HighCVSS 7.0/10Last modified Jul 30, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

VendorProductVersions
MicrosoftWindows 11 Version 24H2>= 10.0.26100.0, < 10.0.26100.7623
MicrosoftWindows 11 Version 25H2>= 10.0.26200.0, < 10.0.26200.7623
MicrosoftWindows Server 2025>= 10.0.26100.0, < 10.0.26100.32230
MicrosoftWindows Server 2025 (Server Core installation)>= 10.0.26100.0, < 10.0.26100.32230

References

Timeline

Published
Jan 13, 2026
Last modified
Jul 30, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-208167.0Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-208177.8Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges lCVE-2026-208186.2Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally.CVE-2026-208195.5Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information lCVE-2026-20827.2A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/set_mac_clone. SucCVE-2026-208207.8Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.CVE-2026-208216.2Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose infoCVE-2026-208227.8Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.CVE-2026-208235.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information loCVE-2026-208245.5Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.CVE-2026-208254.4Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.CVE-2026-208267.0Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsys