CVE-2026-20799: Medium severity Battery Life Diagnostic Tool vulnerability
Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Battery Life Diagnostic Toolto a version that resolves this vulnerability.Fixed in 2.9.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20799?
The severity of CVE-2026-20799 is 41, indicating a significant potential for exploitation.
How do I fix CVE-2026-20799?
To fix CVE-2026-20799, users should upgrade to Battery Life Diagnostic Tool software version 2.9.0 or later.
What types of systems are affected by CVE-2026-20799?
CVE-2026-20799 affects systems running versions of the Battery Life Diagnostic Tool software prior to 2.9.0.
What kind of attack does CVE-2026-20799 allow?
CVE-2026-20799 may allow an escalation of privilege via a high complexity attack by an authenticated user.
Who is at risk from CVE-2026-20799?
Any unprivileged software adversary with an authenticated user account may exploit CVE-2026-20799 to escalate privileges.