CVE-2026-20922
- EPSS 0.57%
- Veröffentlicht 13.01.2026 17:56:40
- Zuletzt bearbeitet 15.01.2026 21:03:37
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-20923
- EPSS 0.39%
- Veröffentlicht 13.01.2026 17:56:40
- Zuletzt bearbeitet 15.01.2026 18:17:50
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20921
- EPSS 1.15%
- Veröffentlicht 13.01.2026 17:56:39
- Zuletzt bearbeitet 26.05.2026 19:16:24
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20919
- EPSS 0.78%
- Veröffentlicht 13.01.2026 17:56:38
- Zuletzt bearbeitet 15.01.2026 21:18:02
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20918
- EPSS 0.3%
- Veröffentlicht 13.01.2026 17:56:37
- Zuletzt bearbeitet 15.01.2026 21:22:36
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20877
- EPSS 0.3%
- Veröffentlicht 13.01.2026 17:56:36
- Zuletzt bearbeitet 15.01.2026 21:25:29
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
- EPSS 0.29%
- Veröffentlicht 13.01.2026 17:56:35
- Zuletzt bearbeitet 15.01.2026 15:47:01
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.
CVE-2026-20875
- EPSS 1.53%
- Veröffentlicht 13.01.2026 17:56:35
- Zuletzt bearbeitet 15.01.2026 21:37:12
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
CVE-2026-20860
- EPSS 7.98%
- Veröffentlicht 13.01.2026 17:56:33
- Zuletzt bearbeitet 15.01.2026 15:29:06
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-20864
- EPSS 0.53%
- Veröffentlicht 13.01.2026 17:56:33
- Zuletzt bearbeitet 26.05.2026 18:16:37
Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.