Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-01-15
CVE-2026-20832 - Windows 10 Version 1607 Plugin
Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability
PLUGIN
Windows 10 Version 1607
CVE-2026-20832
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20836 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20836
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20835 - Windows 11 Version 24H2 Plugin
Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.
PLUGIN
Windows 11 Version 24H2
CVE-2026-20835
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20833 - Windows Server 2008 R2 Service Pack 1 Plugin
Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally.
PLUGIN
Windows Server 2008 R2 Service Pack 1
CVE-2026-20833
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20834 - Windows 10 Version 1607 Plugin
Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.
PLUGIN
Windows 10 Version 1607
CVE-2026-20834
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20831 - Windows 10 Version 1607 Plugin
Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20831
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20826 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20826
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20830 - Windows Server 2025 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows Server 2025
CVE-2026-20830
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20829 - Windows 10 Version 1809 Plugin
Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20829
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20827 - Windows 10 Version 1607 Plugin
Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20827
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20828 - Windows 10 Version 1607 Plugin
Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack.
PLUGIN
Windows 10 Version 1607
CVE-2026-20828
Risk Score
Threat Entry
Updated 2026-01-14
CVE-2026-20822 - Windows 10 Version 1607 Plugin
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20822
Risk Score
Threat Entry
Updated 2026-01-14
CVE-2026-20820 - Windows 10 Version 1607 Plugin
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20820
Risk Score
Threat Entry
Updated 2026-01-14
CVE-2026-20821 - Windows 10 Version 1607 Plugin
Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20821
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20824 - Windows 10 Version 1607 Plugin
Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20824
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20823 - Windows 10 Version 1607 Plugin
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20823
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20825 - Windows 10 Version 1809 Plugin
Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20825
Risk Score
Threat Entry
Updated 2026-01-14
CVE-2026-20817 - Windows 10 Version 21H2 Plugin
Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20817
Risk Score
Threat Entry
Updated 2026-01-14
CVE-2026-20816 - Windows 10 Version 1607 Plugin
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20816
Risk Score
Threat Entry
Updated 2026-01-14
CVE-2026-20815 - Windows 11 Version 24H2 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 11 Version 24H2
CVE-2026-20815
Risk Score