CVE-2026-20825
- EPSS 0.05%
- Veröffentlicht 13.01.2026 17:56:18
- Zuletzt bearbeitet 15.01.2026 13:18:07
Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.
CVE-2026-20822
- EPSS 0.05%
- Veröffentlicht 13.01.2026 17:56:17
- Zuletzt bearbeitet 14.01.2026 20:41:57
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2026-20823
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:17
- Zuletzt bearbeitet 15.01.2026 13:24:55
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
CVE-2026-20821
- EPSS 0.05%
- Veröffentlicht 13.01.2026 17:56:16
- Zuletzt bearbeitet 14.01.2026 20:35:46
Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.
- EPSS 0.06%
- Veröffentlicht 13.01.2026 17:56:13
- Zuletzt bearbeitet 14.01.2026 20:29:02
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:12
- Zuletzt bearbeitet 14.01.2026 20:26:47
Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-20812
- EPSS 0.08%
- Veröffentlicht 13.01.2026 17:56:11
- Zuletzt bearbeitet 14.01.2026 20:25:38
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
CVE-2026-20810
- EPSS 0.05%
- Veröffentlicht 13.01.2026 17:56:10
- Zuletzt bearbeitet 14.01.2026 20:12:30
Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-20809
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:09
- Zuletzt bearbeitet 14.01.2026 20:11:46
Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.
CVE-2026-20805
- EPSS 6.27%
- Veröffentlicht 13.01.2026 17:56:08
- Zuletzt bearbeitet 14.01.2026 13:44:31
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.