This vulnerability involves an out-of-bounds read in the Capability Access Management Service (camsvc) component of Windows 11 Version 24H2 (build 10.0.26100.0). An authorized attacker with local privileges can exploit this flaw to read memory outside the intended bounds, potentially disclosing sensitive information. The issue does not affect integrity or availability. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an authorized local attacker to disclose information by reading memory out-of-bounds. There is no impact on system integrity or availability. The confidentiality impact is rated high according to the CVSS vector, but overall severity is medium.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 11 Version 24H2 (build 10.0.26100.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20835.