PT-2026-2677 · Microsoft · Tablet Windows User Interface+1

Published 2026-01-13 · Updated 2026-01-17 · CVE-2026-20827

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tablet Windows User Interface (TWINUI) Subsystem (affected versions not specified)

Description The TWINUI Subsystem contains a flaw that could allow an attacker to disclose sensitive information locally. An authorized attacker can exploit this issue to gain access to information they are not permitted to view.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-00498

CVE-2026-20827

Affected Products

Tablet Windows User Interface

Windows

References · 8

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20827 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-20827 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-20827 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20827 · Security Note
• https://bdu.fstec.ru/vul/2026-00498 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20827 · Security Note
• https://cybersecurity-help.cz/vdb/SB2026011386 · Note
• https://twitter.com/CVEnew/status/2012490414473838715 · Twitter Post