Month: January 2026

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-20824 Windows Remote Assistance Security Feature Bypass Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21221 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability→

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-20822 Windows Graphics Component Elevation of Privilege Vulnerability→

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-20956 Microsoft Excel Remote Code Execution Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-20821 Remote Procedure Call Information Disclosure Vulnerability→

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-20946 Microsoft Excel Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-20820 Windows Common Log File System Driver Elevation of Privilege Vulnerability→

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-20938 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability→