Microsoft has recorded CVE-2026-20920 as a kernel-level elevation-of-privilege vulnerability in the Windows Win32K component: a use‑after‑free in the ICOMP surface that an authorized local attacker can trigger to escalate privileges to SYSTEM. Evidence in vendor advisories and community trackers...
