Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-01-14
CVE-2026-21265 - Windows Server 2022 Plugin
Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes related to Windows boot manager or Secure Boot. The operating system’s certificate update protection mechanism relies on firmware components that might contain defects, which can cause certificate trust updates to fail or behave unpredictably. This leads to potential disruption of the Secure Boot trust chain and requires careful validation and…
PLUGIN
Windows Server 2022
CVE-2026-21265
Risk Score
Threat Entry
Updated 2026-01-14
CVE-2026-20962 - Windows Server 2022 Plugin
Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose information locally.
PLUGIN
Windows Server 2022
CVE-2026-20962
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20940 - Windows Server 2022 Plugin
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows Server 2022
CVE-2026-20940
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20939 - Windows Server 2022 Plugin
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
PLUGIN
Windows Server 2022
CVE-2026-20939
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20931 - Windows Server 2022 Plugin
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
PLUGIN
Windows Server 2022
CVE-2026-20931
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20934 - Windows Server 2022 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows Server 2022
CVE-2026-20934
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20937 - Windows Server 2022 Plugin
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
PLUGIN
Windows Server 2022
CVE-2026-20937
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20932 - Windows Server 2022 Plugin
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
PLUGIN
Windows Server 2022
CVE-2026-20932
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20936 - Windows Server 2022 Plugin
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.
PLUGIN
Windows Server 2022
CVE-2026-20936
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20924 - Windows Server 2022 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows Server 2022
CVE-2026-20924
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20929 - Windows Server 2022 Plugin
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows Server 2022
CVE-2026-20929
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20926 - Windows Server 2022 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows Server 2022
CVE-2026-20926
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20925 - Windows Server 2022 Plugin
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
PLUGIN
Windows Server 2022
CVE-2026-20925
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20927 - Windows Server 2022 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network.
PLUGIN
Windows Server 2022
CVE-2026-20927
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20923 - Windows Server 2022 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows Server 2022
CVE-2026-20923
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20922 - Windows Server 2022 Plugin
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
PLUGIN
Windows Server 2022
CVE-2026-20922
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20920 - Windows Server 2022 Plugin
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows Server 2022
CVE-2026-20920
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20921 - Windows Server 2022 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows Server 2022
CVE-2026-20921
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20919 - Windows Server 2022 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows Server 2022
CVE-2026-20919
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20918 - Windows Server 2022 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows Server 2022
CVE-2026-20918
Risk Score