2443 matches found
KB5078766: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (March 2026)
The remote Windows host is missing security update 5078766 or hotpatch 5078737. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a network. CVE-2026-23669 - Use after free in Windows Win3...
CVE-2026-20920
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20870
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20863
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20920
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20920
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20870
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20863
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20811
Access of resource using incompatible type 'type confusion' in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20811
Access of resource using incompatible type 'type confusion' in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20870
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20870
CVE-2026-20870 corresponds to a Use-after-free vulnerability in Windows Win32K, specifically in the ICOMP component, enabling a locally authenticated attacker to achieve elevation of privileges . The root cause is a memory-management issue in Win32K ICOMP leading to use-after-free conditions that...
CVE-2026-20863 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-20863
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20863
CVE-2026-20863 is a local privilege escalation in Windows Win32K (ICOMP) caused by a double-free condition. Exploitable by an authorized local attacker with LOW privileges and no user interaction, leading to SYSTEM-level access as described in multiple feeds. Connected documents confirm a Win32K ...
CVE-2026-20863 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-20920
CVE-2026-20920 is a local elevation-of-privileges vulnerability in Microsoft Windows Win32K (ICOMP). The description indicates a use-after-free in Win32K that could allow an authorized user to elevate privileges locally. Public details in connected documents confirm affected scope includes Window...
CVE-2026-20920 Win32k Elevation of Privilege Vulnerability
...