CVE-2026-20921
- EPSS 1.2%
- Veröffentlicht 13.01.2026 17:56:39
- Zuletzt bearbeitet 30.07.2026 21:17:08
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20919
- EPSS 0.82%
- Veröffentlicht 13.01.2026 17:56:38
- Zuletzt bearbeitet 30.07.2026 21:17:07
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20920
- EPSS 0.49%
- Veröffentlicht 13.01.2026 17:56:38
- Zuletzt bearbeitet 30.07.2026 21:17:08
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-20918
- EPSS 0.31%
- Veröffentlicht 13.01.2026 17:56:37
- Zuletzt bearbeitet 30.07.2026 21:17:07
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20876
- EPSS 0.53%
- Veröffentlicht 13.01.2026 17:56:36
- Zuletzt bearbeitet 30.07.2026 21:17:07
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-20877
- EPSS 0.31%
- Veröffentlicht 13.01.2026 17:56:36
- Zuletzt bearbeitet 30.07.2026 21:17:07
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
- EPSS 0.3%
- Veröffentlicht 13.01.2026 17:56:35
- Zuletzt bearbeitet 30.07.2026 21:17:06
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.
CVE-2026-20875
- EPSS 1.59%
- Veröffentlicht 13.01.2026 17:56:35
- Zuletzt bearbeitet 30.07.2026 21:17:07
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
CVE-2026-20865
- EPSS 0.39%
- Veröffentlicht 13.01.2026 17:56:34
- Zuletzt bearbeitet 30.07.2026 21:17:05
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20860
- EPSS 8.29%
- Veröffentlicht 13.01.2026 17:56:33
- Zuletzt bearbeitet 30.07.2026 21:17:04
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.