Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-01-15
CVE-2026-20919 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20919
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20918 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20918
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20877 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20877
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20874 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20874
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20873 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20873
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20875 - Windows 10 Version 1607 Plugin
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20875
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20876 - Windows 11 version 22H3 Plugin
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 11 version 22H3
CVE-2026-20876
Risk Score
Threat Entry
Updated 2026-02-10
CVE-2026-20868 - Windows 10 Version 1607 Plugin
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20868
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20871 - Windows 10 Version 21H2 Plugin
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20871
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20870 - Windows 11 Version 24H2 Plugin
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 11 Version 24H2
CVE-2026-20870
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20867 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20867
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20869 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20869
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20872 - Windows 10 Version 1607 Plugin
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20872
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20866 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20866
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20865 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20865
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20864 - Windows 10 Version 1809 Plugin
Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20864
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20861 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20861
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20863 - Windows 11 version 22H3 Plugin
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 11 version 22H3
CVE-2026-20863
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20862 - Windows 10 Version 1809 Plugin
Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20862
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20856 - Windows 10 Version 1607 Plugin
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20856
Risk Score