CVE-2026-20866
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:57
- Zuletzt bearbeitet 15.01.2026 15:41:10
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20862
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:56
- Zuletzt bearbeitet 15.01.2026 15:33:07
Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally.
CVE-2026-20861
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:55
- Zuletzt bearbeitet 15.01.2026 15:31:53
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20853
- EPSS 0.05%
- Veröffentlicht 13.01.2026 17:56:54
- Zuletzt bearbeitet 15.01.2026 13:28:14
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows WalletService allows an unauthorized attacker to elevate privileges locally.
CVE-2026-20848
- EPSS 0.06%
- Veröffentlicht 13.01.2026 17:56:53
- Zuletzt bearbeitet 15.01.2026 14:03:20
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20849
- EPSS 0.09%
- Veröffentlicht 13.01.2026 17:56:53
- Zuletzt bearbeitet 15.01.2026 14:00:19
Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
CVE-2026-20843
- EPSS 0.06%
- Veröffentlicht 13.01.2026 17:56:52
- Zuletzt bearbeitet 15.01.2026 14:11:49
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-20940
- EPSS 0.05%
- Veröffentlicht 13.01.2026 17:56:44
- Zuletzt bearbeitet 16.01.2026 15:54:53
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-20932
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:43
- Zuletzt bearbeitet 16.01.2026 15:15:18
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
CVE-2026-20934
- EPSS 0.06%
- Veröffentlicht 13.01.2026 17:56:43
- Zuletzt bearbeitet 16.01.2026 15:17:38
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.