Month: January 2026

Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-20816 Windows Installer Elevation of Privilege Vulnerability→

Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-20929 Windows HTTP.sys Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-20815 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Management Services allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-20867 Windows Management Services Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Graphics Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-20814 DirectX Graphics Kernel Elevation of Privilege Vulnerability→

Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-20849 Windows Kerberos Elevation of Privilege Vulnerability→

Improper input validation in Windows LDAP – Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network. Continue reading CVE-2026-20812 LDAP Tampering Vulnerability→

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability→