CVE-2026-20873

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-20873 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20873

CVE-2026-20873 describes a race-condition in Windows Management Services that enables local privilege escalation by an authorized attacker. The issue affects Windows Management Services components and is documented in Microsoft security updates as part of January 2026 patching. Microsoft KBs KB50...

CVE-2026-20873 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20867 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20867

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-20867 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20867

CVE-2026-20867 describes a race-condition in Windows Management Services caused by concurrent execution over a shared resource with improper synchronization. This vulnerability enables a locally authenticated attacker to elevate privileges. The issue is addressed in Microsoft’s January 2026 secur...

CVE-2026-20866 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20866

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-20866 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20866

CVE-2026-20866 is a race condition in Windows Management Services caused by concurrent access to a shared resource without proper synchronization, leading to local privilege escalation. Affected component: Windows Management Services. Impact: elevated privileges locally. The connected documents i...

CVE-2026-20862 Windows Management Services Information Disclosure Vulnerability

...

CVE-2026-20862 Windows Management Services Information Disclosure Vulnerability

...

CVE-2026-20862

Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally...

CVE-2026-20862

CVE-2026-20862 is a Windows Management Services information disclosure vulnerability. The description in the initial document states that it allows an authorized attacker to disclose sensitive information locally. The connected Nessus/NCSC/ENISA entries confirm this is a local-impact issue tied t...

CVE-2026-20861

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-20861 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20861 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-20861

CVE-2026-20861 describes a race condition in Windows Management Services that allows an authorized, local attacker to elevate privileges. The connected documents corroborate that this CVE is associated with Windows Management Services and appears in Microsoft‑affecting security updates released J...