CVE-2026-20820
- EPSS 0.03%
- Veröffentlicht 13.01.2026 17:56:15
- Zuletzt bearbeitet 14.01.2026 20:34:20
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-20818
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:14
- Zuletzt bearbeitet 14.01.2026 20:32:15
Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally.
- EPSS 0.02%
- Veröffentlicht 13.01.2026 17:56:13
- Zuletzt bearbeitet 14.01.2026 20:29:02
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
- EPSS 0.03%
- Veröffentlicht 13.01.2026 17:56:12
- Zuletzt bearbeitet 14.01.2026 20:26:47
Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-20812
- EPSS 0.07%
- Veröffentlicht 13.01.2026 17:56:11
- Zuletzt bearbeitet 14.01.2026 20:25:38
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
CVE-2026-20810
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:10
- Zuletzt bearbeitet 14.01.2026 20:12:30
Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-20809
- EPSS 0.03%
- Veröffentlicht 13.01.2026 17:56:09
- Zuletzt bearbeitet 14.01.2026 20:11:46
Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.
CVE-2026-20805
- EPSS 3.23%
- Veröffentlicht 13.01.2026 17:56:08
- Zuletzt bearbeitet 14.01.2026 13:44:31
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.
CVE-2026-20804
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:56:07
- Zuletzt bearbeitet 14.01.2026 20:03:08
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.
CVE-2026-0386
- EPSS 0.07%
- Veröffentlicht 13.01.2026 17:56:05
- Zuletzt bearbeitet 14.01.2026 20:01:53
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.