CVE•Published 2026-01-13•Modified 2026-07-30•1 article on news•7 live references•NVD data

CVE-2026-20817Microsoft · Windows_10_21h2

Vulnerability data via NVD (ingested)

CVSS v3.1

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS percentile

Exploit Prediction Scoring System · top 8% of all CVEs

Weaknesses (CWE)

CWE-280Improper Handling of Insufficient Permissions or Privileges

Description

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Timeline

Published 2026-01-13

Modified 2026-07-30

External references

NVD MITRE Exploit-DB GitHub PoC Sploitus trickest/cve VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2026-20817

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · OS

os:"Windows 10 21h2"

Hosts Shodan identified as running Windows 10 21h2.

More intel sources (5)

Shodan report

vuln:CVE-2026-20817

Country / ASN / product breakdown for the vuln query.

Censys

vulnerabilities.cve_id: CVE-2026-20817

Censys host search filtered to this CVE id.

grep.app

CVE-2026-20817

Public source-code mentions — fast PoC discovery.

GitHub code

CVE-2026-20817

GitHub code search for direct mentions.

Google dork

"CVE-2026-20817" exploit -site:nvd.nist.gov

Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2026-208178 repos

nomi-sec/PoC-in-GitHubunknown

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

★ 8,106·updated 5d ago

GhostTroops/TOPShell

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

★ 731·updated 5d ago

oxfemale/CVE-2026-20817C++

Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service.

★ 129·updated 7mo ago

DarkFunct/TK-CVE-RepoPython

ZeroDayEvil/CVE-2026-20817unknown

★ 24·updated 2w ago

RDTUTORIAL/GhostUSBC++

Open-source ESP32-S2/S3 security research firmware featuring USB HID emulation, wireless device communication, embedded security testing tools, and red-team laboratory experiments …

★ 1·updated 3mo ago

didntchooseaname/BetterPrivescPowerShell

Straight-to-the-point priv-esc enumeration (Windows + GNU/Linux). Inspired by winPEAS/linPEAS. No banner, optional keyword search and HTTP exfil.

★ 1·updated 1mo ago