Microsoft Warns of Windows Remote Assistance Security Bypass Vulnerability

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Windows Remote Assistance Vulnerability CVE-2026-20824 Disclosed A critical security vulnerability, CVE-2026-20824, affecting Windows Remote Assistance was disclosed on January 13, 2026. This vulnerability allows attackers to bypass the Mark of the Web (MOTW) defense system, impacting multiple Windows platforms from Windows 10 to Windows Server 2025. Microsoft has rated this vulnerability as 'Important'. 3 sources 38