cve 2026 20824

CVE-2026-20824 is a security feature bypass vulnerability in Windows Remote Assistance, disclosed by Microsoft in its January 2026 Security Update Guide. The flaw allows a local, unauthorized attacker to circumvent a protection mechanism on affected systems. Windows Remote Assistance (msra.exe and related components) is a legacy built-in tool for remote support. This vulnerability is classified as a protection-mechanism failure. Users should apply the January 2026 security updates to mitigate the risk. Discussions on WindowsForum cover the technical details, affected components, and remediation steps for this specific CVE.