> CVE-2026-20938 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

[SOURCE] Microsoft Security Update Guide [DATE: 13/01/2026 08:00] [LANGUAGE: EN]

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.