CyberICT

CVE-2026-20830

Microsoft · Published January 13, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability. Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

Affected Products

  • Windows Server 2025 (Server Core installation)
  • Windows Server 2025

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C