LiveActive security incident?Get immediate response

CVE archive

January 2026

Browse CVE records published in January 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 50 of 1838 matching CVEs · Page 4 of 37.

High · CVSS 7.8

CVE-2026-20924: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20923: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20922: Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.5

CVE-2026-20921: Windows SMB Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20920: Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.5

CVE-2026-20919: Windows SMB Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20918: Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20877: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 6.7

CVE-2026-20876: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.5

CVE-2026-20875: Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7

CVE-2026-20869: Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20865: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20864: Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20860: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20859: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20858: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20857: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 8.1

CVE-2026-20856: Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.7

CVE-2026-20852: Windows Hello Tampering Vulnerability

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 6.2

CVE-2026-20851: Capability Access Management Service (camsvc) Information Disclosure Vulnerability

Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 6.5

CVE-2026-20847: Microsoft Windows File Explorer Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.4

CVE-2026-20844: Windows Clipboard Server Elevation of Privilege Vulnerability

Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7

CVE-2026-20842: Microsoft DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20840: Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 5.5

CVE-2026-20839: Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability

Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 5.5

CVE-2026-20838: Windows Kernel Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20837: Windows Media Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7

CVE-2026-20836: DirectX Graphics Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 5.5

CVE-2026-20835: Capability Access Management Service (camsvc) Information Disclosure Vulnerability

Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 4.6

CVE-2026-20834: Windows Spoofing Vulnerability

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 5.5

CVE-2026-20833: Windows Kerberos Information Disclosure Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20832: Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20831: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 5.5

CVE-2026-20829: TPM Trustlet Information Disclosure Vulnerability

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 4.6

CVE-2026-20828: Windows rndismp6.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 5.5

CVE-2026-20827: Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20826: Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 4.4

CVE-2026-20825: Windows Hyper-V Information Disclosure Vulnerability

Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 5.5

CVE-2026-20824: Windows Remote Assistance Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 5.5

CVE-2026-20823: Windows File Explorer Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20822: Windows Graphics Component Elevation of Privilege Vulnerability

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 6.2

CVE-2026-20821: Remote Procedure Call Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20820: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 5.5

CVE-2026-20819: Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 6.2

CVE-2026-20818: Windows Kernel Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20817: Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7.8

CVE-2026-20816: Windows Installer Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7

CVE-2026-20815: Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

High · CVSS 7

CVE-2026-20814: DirectX Graphics Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.

Published Jan 13, 2026 · Updated Jul 30, 2026

Medium · CVSS 6.5

CVE-2026-20812: LDAP Tampering Vulnerability

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.

Published Jan 13, 2026 · Updated Jul 30, 2026