This vulnerability (CVE-2026-32220) affects Windows 11 Version 24H2 (build 10.0.26100.0) and is classified under CWE-284 (Improper Access Control). It specifically involves the Windows Virtualization-Based Security (VBS) Enclave component, where an authorized attacker with high privileges can bypass security controls locally. The CVSS v3.1 base score is 4.4, reflecting a medium severity with local attack vector, low attack complexity, and no user interaction required. The integrity impact is high, while confidentiality and availability impacts are none. Microsoft has released an official fix to remediate this vulnerability.

An authorized attacker with high privileges on the affected Windows 11 system can bypass certain security features within the VBS Enclave, potentially leading to unauthorized modification or tampering of protected components or data. There is no impact on confidentiality or availability. No known exploits are reported in the wild at this time.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the provided security update as soon as possible to remediate the issue. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32220 for detailed patch information and deployment guidance.