cve 2026 20920

Microsoft has recorded CVE-2026-20920 as a kernel-level elevation-of-privilege vulnerability in the Windows Win32K component: a use‑after‑free in the ICOMP surface that an authorized local attacker can trigger to escalate privileges to SYSTEM. Evidence in vendor advisories and community trackers...

Microsoft’s advisory listing for CVE-2026-20920 places this entry squarely in the long-running, high-impact family of Win32k kernel vulnerabilities that enable local elevation of privilege; the vendor’s published description and the accompanying confidence metric make clear that defenders should...