CVE-2026-20805 Microsoft Windows
Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Information Disclosure Vulnerability
- Added
- 2026-01-13
- Federal patch deadline
- 2026-02-03
- Ransomware use
- not known