CVE-2026-20870
- EPSS 0.47%
- Veröffentlicht 13.01.2026 17:56:59
- Zuletzt bearbeitet 30.07.2026 21:17:06
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-20868
- EPSS 1.39%
- Veröffentlicht 13.01.2026 17:56:58
- Zuletzt bearbeitet 30.07.2026 21:17:06
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2026-20861
- EPSS 0.3%
- Veröffentlicht 13.01.2026 17:56:55
- Zuletzt bearbeitet 30.07.2026 21:17:04
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20853
- EPSS 0.32%
- Veröffentlicht 13.01.2026 17:56:54
- Zuletzt bearbeitet 30.07.2026 21:17:03
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows WalletService allows an unauthorized attacker to elevate privileges locally.
CVE-2026-20848
- EPSS 0.76%
- Veröffentlicht 13.01.2026 17:56:53
- Zuletzt bearbeitet 30.07.2026 21:17:03
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20849
- EPSS 1.01%
- Veröffentlicht 13.01.2026 17:56:53
- Zuletzt bearbeitet 30.07.2026 21:17:03
Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
CVE-2026-20843
- EPSS 3.45%
- Veröffentlicht 13.01.2026 17:56:52
- Zuletzt bearbeitet 30.07.2026 21:17:02
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
- EPSS 0.23%
- Veröffentlicht 13.01.2026 17:56:50
- Zuletzt bearbeitet 30.07.2026 21:17:13
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-20940
- EPSS 0.47%
- Veröffentlicht 13.01.2026 17:56:44
- Zuletzt bearbeitet 30.07.2026 21:17:11
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-20934
- EPSS 0.82%
- Veröffentlicht 13.01.2026 17:56:43
- Zuletzt bearbeitet 30.07.2026 21:17:10
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.