Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Microsoft
CVE-2026-20840 CVSS 7.8
2026-01-13 08:00 UTC · 2026-01-13 05:00 -03
Buscar noticias
Total: 1668
CVE-2026-20856 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
⚠️ Importante
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
Microsoft
CVE-2026-20856 CVSS 8.1
2026-01-13 08:00 UTC · 2026-01-13 05:00 -03
CVE-2026-20860 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
⚠️ Importante
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Microsoft
CVE-2026-20860 CVSS 7.8
2026-01-13 08:00 UTC · 2026-01-13 05:00 -03
CVE-2026-20875 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
⚠️ Importante
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
Microsoft
CVE-2026-20875 CVSS 7.5
2026-01-13 08:00 UTC · 2026-01-13 05:00 -03
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
Microsoft
CVE-2026-20919 CVSS 7.5
2026-01-13 08:00 UTC · 2026-01-13 05:00 -03