MICROSOFT-CVE-2026-20821

MEDIUM6.2

Remote Procedure Call Information Disclosure Vulnerability

Published Jan 13, 2026

Modified Yesterday

Details

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.

References

ADVISORY

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20821

CVSS Analysis

CVSS v2.0

6.2

Upstream

CVE-2026-20821

Ecosystems

Timeline

PublishedJan 13, 2026

ModifiedApr 30, 2026