Product:
Windows Virtualization-Based Security
Summary
Untrusted pointer dereference in Windows Virtualization-Based Security Enclave allows an unauthorized attacker to disclose information locally. This vulnerability can lead to significant confidentiality impacts, making sensitive information accessible to attackers. It is crucial for users to be aware of this issue to protect their systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-20935 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By leveraging the untrusted pointer dereference, the attacker can manipulate the VBS Enclave to disclose sensitive information. This requires no special privileges or user interaction, making it easier for unauthorized users to exploit the flaw.
Affected Products
- Windows Virtualization-Based Security: A security feature that isolates sensitive processes and data to protect against unauthorized access.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Regularly applying updates and monitoring for security advisories can help protect against potential exploitation of this issue.