CVE-2026-20836

HighCVSS 7.0/10Last modified Jul 30, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
Microsoft	Windows 10 Version 1607	>= 10.0.14393.0, < 10.0.14393.8783
Microsoft	Windows 10 Version 1809	>= 10.0.17763.0, < 10.0.17763.8276
Microsoft	Windows 10 Version 21H2	>= 10.0.19044.0, < 10.0.19044.6809
Microsoft	Windows 10 Version 22H2	>= 10.0.19045.0, < 10.0.19045.6809
Microsoft	Windows 11 version 23H2	>= 10.0.22631.0, < 10.0.22631.6491
Microsoft	Windows 11 Version 23H2	>= 10.0.22631.0, < 10.0.22631.6491
Microsoft	Windows 11 Version 24H2	>= 10.0.26100.0, < 10.0.26100.7623
Microsoft	Windows 11 Version 25H2	>= 10.0.26200.0, < 10.0.26200.7623
Microsoft	Windows Server 2016	>= 10.0.14393.0, < 10.0.14393.8783
Microsoft	Windows Server 2016 (Server Core installation)	>= 10.0.14393.0, < 10.0.14393.8783
Microsoft	Windows Server 2019	>= 10.0.17763.0, < 10.0.17763.8276
Microsoft	Windows Server 2019 (Server Core installation)	>= 10.0.17763.0, < 10.0.17763.8276
Microsoft	Windows Server 2022	>= 10.0.20348.0, < 10.0.20348.4648
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	>= 10.0.25398.0, < 10.0.25398.2092
Microsoft	Windows Server 2025	>= 10.0.26100.0, < 10.0.26100.32230
Microsoft	Windows Server 2025 (Server Core installation)	>= 10.0.26100.0, < 10.0.26100.32230

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20836Vendor Advisory

Timeline

Published: Jan 13, 2026
Last modified: Jul 30, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-208377.8Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.CVE-2026-208385.5Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally CVE-2026-208395.5Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.CVE-2026-20847.2A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/set_language. Executing a man CVE-2026-208407.8Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.CVE-2026-208417.8Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker t CVE-2026-208427.0Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.CVE-2026-208437.8Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.CVE-2026-208447.4Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally.CVE-2026-208467.5Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.CVE-2026-208476.5Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network CVE-2026-208487.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attac