Microsoft’s Security Update Guide registers CVE-2026-20861 as an Elevation of Privilege vulnerability in Windows Management Services (WMS) — a management‑plane component that routinely runs with elevated privileges — and the flaw was included in Microsoft’s January 13, 2026 Patch Tuesday rollup...