{"vulnerability": "cve-2026-20871", "sightings": [{"uuid": "f6362d72-b3ab-4ffd-b7a9-c2c301f76957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "ede5f7a2-54d0-455b-918c-60708accf304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-044/", "content": "", "creation_timestamp": "2026-01-13T05:00:00.000000Z"}, {"uuid": "adc78894-2a2c-42d9-ae5b-cafc1f96b259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "762ca296-a457-42f0-9cd6-fc52615f0479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "15d028cf-642e-436c-aa21-216ea4572925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116913919468226933", "content": "Micropatches released for Desktop Window Manager Elevation of Privilege Vulnerability (CVE-2026-20871)https://0patch.com/blog/micropatches-released-for-desktop-window-manager-elevation-of-privilege-vulnerabi", "creation_timestamp": "2026-07-13T17:47:16.639199Z"}, {"uuid": "83adafc8-ac0d-4a5a-8d86-22123a22968e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T20:00:05.774187Z"}, {"uuid": "5be53cbf-891a-4072-a899-dab97ca4b89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.302966Z"}]}