Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-01-15
CVE-2026-20874 - Windows 10 Version 21H2 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20874
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20873 - Windows 10 Version 21H2 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20873
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20875 - Windows 10 Version 21H2 Plugin
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20875
Risk Score
Threat Entry
Updated 2026-02-10
CVE-2026-20868 - Windows 10 Version 21H2 Plugin
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20868
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20871 - Windows 10 Version 21H2 Plugin
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20871
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20867 - Windows 10 Version 21H2 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20867
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20869 - Windows 10 Version 21H2 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20869
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20872 - Windows 10 Version 21H2 Plugin
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20872
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20866 - Windows 10 Version 21H2 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20866
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20865 - Windows 10 Version 21H2 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20865
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20864 - Windows 10 Version 21H2 Plugin
Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20864
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20861 - Windows 10 Version 21H2 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20861
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20862 - Windows 10 Version 21H2 Plugin
Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20862
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20856 - Windows 10 Version 21H2 Plugin
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20856
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20860 - Windows 10 Version 21H2 Plugin
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20860
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20858 - Windows 10 Version 21H2 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20858
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20857 - Windows 10 Version 21H2 Plugin
Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20857
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20852 - Windows 10 Version 21H2 Plugin
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20852
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20849 - Windows 10 Version 21H2 Plugin
Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20849
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20848 - Windows 10 Version 21H2 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20848
Risk Score