HarborGuard / CVE
Back to search
HIGHCVE-2026-20941Published Modified CNA microsoft

CVE-2026-20941: Host Process for Windows Tasks Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

Metrics

CVSS v3.1
7.8
Severity
HIGH
Fixed in
10.0.26100.7623
Affected Products
4

Fix available

10.0.26100.762310.0.26100.3223010.0.26200.7623
Patch commits
Affected packages
  • Microsoft / Windows 11 Version 24H2
    < 10.0.26100.7623 (from 10.0.26100.0)
  • Microsoft / Windows 11 Version 25H2
    < 10.0.26200.7623 (from 10.0.26200.0)
  • Microsoft / Windows Server 2025
    < 10.0.26100.32230 (from 10.0.26100.0)
  • Microsoft / Windows Server 2025 (Server Core installation)
    < 10.0.26100.32230 (from 10.0.26100.0)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
References