CVE-2026-20842

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2026-20839

Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...

CVE-2026-20838

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-20833

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally...

CVE-2026-20835

Out-of-bounds read in Capability Access Management Service camsvc allows an authorized attacker to disclose information locally...

CVE-2026-20835

Out-of-bounds read in Capability Access Management Service camsvc allows an authorized attacker to disclose information locally...

CVE-2026-20826

Concurrent execution using shared resource with improper synchronization 'race condition' in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-20831

Time-of-check time-of-use toctou race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-20829

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally...

CVE-2026-20830

Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-20829

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally...

CVE-2026-20823

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-20825

Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally...

CVE-2026-20819

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

CVE-2026-20812

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network...

CVE-2026-20803

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-20936

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack...

CVE-2026-20931

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-20874

CVE-2026-20874 is a Windows Management Services race condition that can lead to local privilege elevation. The initial description states the issue is a race condition in Windows Management Services exploited by an authorized attacker to escalate privileges. Connected documents corroborate this u...

CVE-2026-20873

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...