Skip to content
CodeAuditAgent

CVE-2026-20806

Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally.

Weakness

Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally.

Affected products

  • microsoft windows_10_1809
  • microsoft windows_10_21h2
  • microsoft windows_10_22h2
  • microsoft windows_11_23h2
  • microsoft windows_11_24h2
  • microsoft windows_11_25h2
  • microsoft windows_11_26h1
  • microsoft windows_server_2019

References

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.