CVE-2026-21236
- EPSS 0.03%
- Veröffentlicht 10.02.2026 18:16:24
- Zuletzt bearbeitet 11.02.2026 21:07:23
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- EPSS 0.03%
- Veröffentlicht 10.02.2026 18:16:24
- Zuletzt bearbeitet 11.02.2026 21:05:42
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-21238
- EPSS 0.03%
- Veröffentlicht 10.02.2026 18:16:24
- Zuletzt bearbeitet 11.02.2026 21:01:48
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-21239
- EPSS 0.03%
- Veröffentlicht 10.02.2026 18:16:24
- Zuletzt bearbeitet 11.02.2026 21:00:30
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- EPSS 0.03%
- Veröffentlicht 10.02.2026 18:16:24
- Zuletzt bearbeitet 11.02.2026 20:59:15
Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-21222
- EPSS 0.04%
- Veröffentlicht 10.02.2026 18:16:23
- Zuletzt bearbeitet 11.02.2026 21:18:38
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-21231
- EPSS 0.03%
- Veröffentlicht 10.02.2026 18:16:23
- Zuletzt bearbeitet 11.02.2026 21:13:54
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
- EPSS 0.03%
- Veröffentlicht 10.02.2026 18:16:23
- Zuletzt bearbeitet 11.02.2026 21:10:43
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVE-2026-20846
- EPSS 0.06%
- Veröffentlicht 10.02.2026 18:16:22
- Zuletzt bearbeitet 11.02.2026 20:30:43
Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.
CVE-2026-20937
- EPSS 0.04%
- Veröffentlicht 13.01.2026 17:57:05
- Zuletzt bearbeitet 16.01.2026 15:23:53
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.