Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
CVE-2026-20943 - Microsoft Office 2016 Plugin
Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-20943
CVE-2026-20931 - Windows 10 Version 1607 Plugin
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-20931
CVE-2026-20938 - Windows 11 version 22H3 Plugin
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-20938
CVE-2026-20934 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20934
CVE-2026-20924 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20924
CVE-2026-20929 - Windows 10 Version 1607 Plugin
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
CVE-2026-20929
CVE-2026-20926 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20926
CVE-2026-20923 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20923
CVE-2026-20922 - Windows 10 Version 1607 Plugin
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-20922
CVE-2026-20920 - Windows 11 version 22H3 Plugin
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-20920
CVE-2026-20921 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20921
CVE-2026-20919 - Windows 10 Version 1607 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-20919
CVE-2026-20918 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20918
CVE-2026-20877 - Windows 10 Version 1809 Plugin
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20877
CVE-2026-20874 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20874
CVE-2026-20873 - Windows 10 Version 1809 Plugin
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-20873
CVE-2026-20875 - Windows 10 Version 1607 Plugin
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
CVE-2026-20875
CVE-2026-20868 - Windows 10 Version 1607 Plugin
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2026-20868
CVE-2026-20871 - Windows 10 Version 21H2 Plugin
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-20871
CVE-2026-20870 - Windows 11 Version 24H2 Plugin
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-20870
