CVE-2026-20921
- EPSS 1.15%
- Veröffentlicht 13.01.2026 17:56:39
- Zuletzt bearbeitet 26.05.2026 19:16:24
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20919
- EPSS 0.78%
- Veröffentlicht 13.01.2026 17:56:38
- Zuletzt bearbeitet 15.01.2026 21:18:02
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20920
- EPSS 0.48%
- Veröffentlicht 13.01.2026 17:56:38
- Zuletzt bearbeitet 15.01.2026 21:16:36
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-20918
- EPSS 0.3%
- Veröffentlicht 13.01.2026 17:56:37
- Zuletzt bearbeitet 15.01.2026 21:22:36
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20876
- EPSS 0.51%
- Veröffentlicht 13.01.2026 17:56:36
- Zuletzt bearbeitet 15.01.2026 21:28:22
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-20877
- EPSS 0.3%
- Veröffentlicht 13.01.2026 17:56:36
- Zuletzt bearbeitet 15.01.2026 21:25:29
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
- EPSS 0.29%
- Veröffentlicht 13.01.2026 17:56:35
- Zuletzt bearbeitet 15.01.2026 15:47:01
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.
CVE-2026-20875
- EPSS 1.53%
- Veröffentlicht 13.01.2026 17:56:35
- Zuletzt bearbeitet 15.01.2026 21:37:12
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
CVE-2026-20865
- EPSS 0.38%
- Veröffentlicht 13.01.2026 17:56:34
- Zuletzt bearbeitet 15.01.2026 15:40:06
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20860
- EPSS 7.98%
- Veröffentlicht 13.01.2026 17:56:33
- Zuletzt bearbeitet 15.01.2026 15:29:06
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.