Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-01-16
CVE-2026-20943 - Microsoft Office 2016 Plugin
Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.
PLUGIN
Microsoft Office 2016
CVE-2026-20943
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20931 - Windows 10 Version 1607 Plugin
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20931
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20938 - Windows 11 version 22H3 Plugin
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 11 version 22H3
CVE-2026-20938
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20934 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20934
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20924 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20924
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20929 - Windows 10 Version 1607 Plugin
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20929
Risk Score
Threat Entry
Updated 2026-01-16
CVE-2026-20926 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20926
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20923 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20923
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20922 - Windows 10 Version 1607 Plugin
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
PLUGIN
Windows 10 Version 1607
CVE-2026-20922
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20920 - Windows 11 version 22H3 Plugin
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 11 version 22H3
CVE-2026-20920
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20921 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20921
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20919 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20919
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20918 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20918
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20877 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20877
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20874 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20874
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20873 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 1809
CVE-2026-20873
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20875 - Windows 10 Version 1607 Plugin
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20875
Risk Score
Threat Entry
Updated 2026-02-10
CVE-2026-20868 - Windows 10 Version 1607 Plugin
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
PLUGIN
Windows 10 Version 1607
CVE-2026-20868
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20871 - Windows 10 Version 21H2 Plugin
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 10 Version 21H2
CVE-2026-20871
Risk Score
Threat Entry
Updated 2026-01-15
CVE-2026-20870 - Windows 11 Version 24H2 Plugin
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
PLUGIN
Windows 11 Version 24H2
CVE-2026-20870
Risk Score