Windows Remote Assistance Vulnerability Allow Attacker to Bypass Security Features

This advisory describes CVE-2026-20824, an Important (CVSS 3.1 5.5) security feature bypass in Windows Remote Assistance that can allow local attackers who trick users into opening crafted files to evade Mark of the Web protections. Microsoft has released patches (multiple KBs across Windows 10, Windows 11, and Server editions) and classifies customer action as Required; Microsoft also assesses exploitation as "Less Likely" and reports no known in-the-wild exploitation.