CVE-2026-20836

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-20821

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally...

CVE-2026-20816

Time-of-check time-of-use toctou race condition in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-20816

Time-of-check time-of-use toctou race condition in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-20814

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-20810

Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-20949

Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-20867

CVE-2026-20867 describes a race-condition in Windows Management Services caused by concurrent execution over a shared resource with improper synchronization. This vulnerability enables a locally authenticated attacker to elevate privileges. The issue is addressed in Microsoft’s January 2026 secur...

CVE-2026-20861

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-2110

Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-20924

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-20858

CVE-2026-20858 is a Windows Management Services use-after-free local privilege escalation (high risk, CVSS 7.8). Connected documents confirm it affects Windows Management Services and is tracked in Microsoft’s January 2026 security updates (e.g., KB5073379/KB5073457). Remediation is via the poste...

CVE-2026-20851

CVE-2026-20851 is a local-information-disclosure vulnerability in the Windows Capability Access Management Service (camsvc). The issue is described as an out-of-bounds read that can allow an unauthorized local attacker to disclose information. The connected data identify CAMSVC as affected and cl...

CVE-2026-20826

Concurrent execution using shared resource with improper synchronization 'race condition' in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2025-46684

Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...

CVE-2025-46684

Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...

CVE-2025-46685

Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-8090 Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety

Null pointer dereference in the MsgRegisterEvent system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel...

EUVD-2026-2075

Null pointer dereference in the MsgRegisterEvent system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel...

CVE-2025-46684

Dell SupportAssist OS Recovery (pre-5.5.15.1) contains a flaw where temporary files are created with insecure permissions, enabling a low-privilege local attacker to tamper with information. Affected product: Dell SupportAssist OS Recovery. Root cause: insecure temporary file permissions during c...