High severity7.0NVD Advisory· Published Jan 13, 2026· Updated Jun 17, 2026
CVE-2026-20830
CVE-2026-20830
Description
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
Affected products
4cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*range: <10.0.26100.7623
- (no CPE)range: 10.0.26100.0
- Microsoft/Windows Server 2025 (Server Core installation)v5Range: 10.0.26100.0
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20830nvdVendor Advisory
News mentions
0No linked articles in our index yet.