2026 CVE Vulnerabilities
85,283 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-20919 | HIGH | 7.5 | 0.8% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows... |
| CVE-2026-20918 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Servic... |
| CVE-2026-20877 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-20876 | MEDIUM | 6.7 | 0.5% | Jan 13, 2026 | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to eleva... |
| CVE-2026-20875 | HIGH | 7.5 | 1.5% | Jan 13, 2026 | Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker t... |
| CVE-2026-20874 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Servic... |
| CVE-2026-20873 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Servic... |
| CVE-2026-20872 | MEDIUM | 6.5 | 19.1% | Jan 13, 2026 | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network... |
| CVE-2026-20871 | HIGH | 7.8 | 4.0% | Jan 13, 2026 | Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-20870 | HIGH | 7.8 | 0.4% | Jan 13, 2026 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-20869 | HIGH | 7 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Man... |
| CVE-2026-20868 | HIGH | 8.8 | 1.3% | Jan 13, 2026 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut... |
| CVE-2026-20867 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Servic... |
| CVE-2026-20866 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Servic... |
| CVE-2026-20865 | HIGH | 7.8 | 0.4% | Jan 13, 2026 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-20864 | HIGH | 7.8 | 0.5% | Jan 13, 2026 | Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privi... |
| CVE-2026-20863 | HIGH | 7 | 0.4% | Jan 13, 2026 | Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-20862 | MEDIUM | 5.5 | 0.6% | Jan 13, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker ... |
| CVE-2026-20861 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Servic... |
| CVE-2026-20860 | HIGH | 7.8 | 8.0% | Jan 13, 2026 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an... |
| CVE-2026-20859 | HIGH | 7.8 | 0.5% | Jan 13, 2026 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-20858 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-20857 | HIGH | 7.8 | 0.5% | Jan 13, 2026 | Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privile... |
| CVE-2026-20856 | HIGH | 8.1 | 1.1% | Jan 13, 2026 | Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a networ... |
| CVE-2026-20854 | HIGH | 7.5 | 1.0% | Jan 13, 2026 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute co... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now