CVE-2026-20863 | Microsoft Windows up to Server 2025 Win32k double free

January 13, 2026 Yanac

A vulnerability was found in Microsoft Windows up to Server 2025 and classified as critical. Affected by this issue is some unknown functionality of the component Win32k. Executing a manipulation can lead to double free.

This vulnerability is tracked as CVE-2026-20863. The attack is restricted to local execution. No exploit exists.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More