CVE-2026-20809 Windows Kernel Memory Elevation of Privilege Vulnerability

...

CVE-2026-20809 Windows Kernel Memory Elevation of Privilege Vulnerability

...

CVE-2026-20808 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2026-20808

CVE-2026-20808 is a Windows local privilege escalation vulnerability in the Printer Association Object caused by concurrent execution on a shared resource without proper synchronization. An authenticated, locally privileged user can exploit this race condition to elevate privileges. Affected soft...

CVE-2026-20808 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2026-20803 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-20803 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-20965

CVE-2026-20965 affects Windows Admin Center. The underlying issue is improper verification of cryptographic signatures, enabling an authorized local attacker to elevate privileges. CVSS v3.1 base score 7.5 (ATT&CK not explicitly cited in the documents). The vulnerability requires local access, hi...

CVE-2026-20965 Windows Admin Center Elevation of Privilege Vulnerability

...

CVE-2026-20965 Windows Admin Center Elevation of Privilege Vulnerability

...

CVE-2026-20803

CVE-2026-20803 is a Microsoft SQL Server elevation of privilege vulnerability. The issue allows an authenticated attacker to gain elevated privileges on the SQL Server instance over a network, due to missing authentication for a critical function. Connected advisories confirm exploitation risk an...

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Windows Admin Center Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally...

Windows File Explorer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Printer Association Object allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Elevation of Privilege Vulnerability

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...

Host Process for Windows Tasks Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...

Windows Telephony Service Elevation of Privilege Vulnerability

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability

Microsoft is aware of vulnerabilities in the third party Motorola Soft Modem drivers that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of smserl64.sys and smserial.sys drivers. The drivers have been removed in the January cumulative...