Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-01-16
CVE-2026-20946 - Microsoft 365 Apps for Enterprise Plugin
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
PLUGIN
Microsoft 365 Apps for Enterprise
CVE-2026-20946
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20944 - Microsoft 365 Apps for Enterprise Plugin
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
PLUGIN
Microsoft 365 Apps for Enterprise
CVE-2026-20944
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20941 - Windows 11 Version 24H2 Plugin
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 11 Version 24H2
CVE-2026-20941
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20940 - Windows 10 Version 1607 Plugin
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20940
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20943 - Microsoft Office 2016 Plugin
Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.
PLUGIN
Microsoft Office 2016
CVE-2026-20943
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20939 - Windows 10 Version 1607 Plugin
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20939
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20931 - Windows 10 Version 1607 Plugin
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20931
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20938 - Windows 11 version 22H3 Plugin
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 11 version 22H3
CVE-2026-20938
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20934 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20934
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20935 - Windows 11 version 22H3 Plugin
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
PLUGIN
Windows 11 version 22H3
CVE-2026-20935
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20937 - Windows 10 Version 1607 Plugin
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20937
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20932 - Windows 10 Version 1607 Plugin
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20932
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20936 - Windows 10 Version 1607 Plugin
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.
PLUGIN
Windows 10 Version 1607
CVE-2026-20936
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20924 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20924
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20929 - Windows 10 Version 1607 Plugin
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20929
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20926 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20926
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20925 - Windows 10 Version 1607 Plugin
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20925
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20927 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20927
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20923 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20923
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20922 - Windows 10 Version 1607 Plugin
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20922
Risk Score