About Information Disclosure – Desktop Window Manager (CVE-2026-20805) vulnerability

🗓️ 24 Jan 2026 09:40:15Reported by Alexander LeonovType

avleonov🔗 avleonov.com👁 18 Views

CVE-2026-20805 in Desktop Window Manager enables local memory disclosure via ALPC and ASLR bypass.

Reporter	Title	Published	Views	Family All 54
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	31 Jan 202606:40	–	githubexploit
GithubExploit	Exploit for Improper Authorization in Microsoft	11 Sep 202623:08	–	githubexploit
GithubExploit	Exploit for CVE-2026-20805	14 Jan 202613:26	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in N8N	12 Sep 202600:03	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	19 Jan 202619:16	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	30 Jan 202609:54	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	31 Jan 202606:52	–	githubexploit
ATTACKERKB	CVE-2026-20805	13 Jan 202617:56	–	attackerkb
Information Security Automation	February “In the Trend of VM” (#24): vulnerabilities in Microsoft products	12 Feb 202622:19	–	avleonov
BDU FSTEC	The vulnerability of the window manager for desktop workstations in Windows operating systems allows attackers to disclose protected information.	14 Jan 202600:00	–	bdu_fstec

24 Jan 2026 09:40Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.5

EPSS0.05187

SSVC

Desktop Window Manager Information disclosure Local memory access Remote port memory Patch Tuesday January