Improper link resolution before file access (‘link following’) in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
CVE-2026-20941 Host Process for Windows Tasks Elevation of Privilege Vulnerability
Published January 15, 2026