What is the CVSS score of CVE-2026-20863?

CVE-2026-20863 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Windows 11 23h2 are affected by CVE-2026-20863?

Organizations using Double free in Windows Win32K - ICOMP face moderate risk from CVE-2026-20863 rated CVSS 7.0. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-20863?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Windows 11 23h2 CVE-2026-20863

HIGH

Double Free (CWE-415)

2026-01-13 secure@microsoft.com

Information Disclosure Microsoft Windows 11 23h2 Windows 11 24h2 Windows 11 25h2 Windows Server 2022 Windows Server 2022 23h2 Windows Server 2025

7.0

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.0 HIGH

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 13, 2026 - 18:16 nvd

HIGH 7.0

DescriptionCVE.org

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

AnalysisAI

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. [CVSS 7.0 HIGH]

Technical ContextAI

Affects Windows 11 23H2. Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

RemediationAI

Monitor vendor advisories for a patch.

More in Windows 11 23h2

View all

CVE-2024-21412 HIGH Act Now POC

8.1 Feb 13

Internet Shortcut Files Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is rem

CVE-2024-30088 HIGH Act Now POC

7.0 Jun 11

Windows Kernel contains a TOCTOU race condition vulnerability allowing local privilege escalation, exploited by the OilR

CVE-2025-33053 HIGH Act Now POC

8.8 Jun 10

Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables

CVE-2025-33073 HIGH Act Now POC

8.8 Jun 10

Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker

CVE-2024-21338 HIGH Act Now POC

7.8 Feb 13

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack co

CVE-2025-21293 HIGH Act Now POC

8.8 Jan 14

Active Directory Domain Services contains an elevation of privilege vulnerability that allows authenticated domain users

CVE-2024-35250 HIGH Act Now POC

7.8 Jun 11

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

CVE-2024-43461 HIGH Act Now

8.8 Sep 10

Windows MSHTML Platform Spoofing Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitab

CVE-2025-30397 HIGH Act Now POC

7.5 May 13

Microsoft Scripting Engine contains a type confusion vulnerability allowing unauthorized remote code execution over the

CVE-2024-49039 HIGH Act Now POC

8.8 Nov 12

Windows Task Scheduler Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is low a

CVE-2024-21351 HIGH Act Now

7.6 Feb 13

Windows SmartScreen Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotel

CVE-2026-81963 HIGH Act Now POC

7.8 Sep 08

Symlink following (CWE-59) in the Windows Update Stack enables a locally authenticated attacker with standard user privi

Same weakness CWE-415 – Double Free

View all

CVE-2014-0502 HIGH POC

8.8

CVE-2018-0101 CRITICAL POC

10.0

CVE-2023-25136 MEDIUM POC

6.5

CVE-2026-33824 CRITICAL POC

9.8

CVE-2014-1767 HIGH POC

7.2

CVE-2016-5768 CRITICAL POC

9.8

CVE-2016-5772 CRITICAL POC

9.8

CVE-2016-3132 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2026-20863 vulnerability details – vuln.today

Back

Windows 11 23h2 CVE-2026-20863

Severity by source

CVSS VectorVendor: microsoft

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Windows 11 23h2

Same weakness CWE-415 – Double Free

Same technique Information Disclosure

Share

External POC / Exploit Code