What Is This?
Actively exploited zero-day allowing attackers to read memory addresses from remote ALPC port. Added to CISA KEV catalog.
Affected Systems
Windows 10
Windows 11
Windows Server
- Critical
- Active
- Zero-Day
- CVE-2026-20805
- Published Jan 14, 2026
- Tracked since Mar 8, 2026