Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locall…

High CVSS 7.0

CVECVE-2026-20815

First seen2026-07-31 15:16 UTC

Disclosed2026-01-13 18:16 UTC

Last updated2026-07-31 15:16 UTC

Channel statusauto

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20815 Vendor Advisory

Timeline

2026-07-31 nvd_ingest NVD