CVE-2026-20806

CVSS Score & Metrics

Base Score

5.5 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N                                    

Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally.

Published Date

April 14, 2026

Last Modified

April 17, 2026

CWE ID

CWE-843

Source

NVD