2026 CVE Vulnerabilities
85,283 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-20853 | HIGH | 7.4 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows WalletService all... |
| CVE-2026-20852 | HIGH | 7.7 | 0.5% | Jan 13, 2026 | Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally. |
| CVE-2026-20851 | MEDIUM | 6.2 | 0.6% | Jan 13, 2026 | Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose informat... |
| CVE-2026-20849 | HIGH | 7.5 | 1.0% | Jan 13, 2026 | Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privile... |
| CVE-2026-20848 | HIGH | 7.5 | 0.7% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows... |
| CVE-2026-20847 | MEDIUM | 6.5 | 1.3% | Jan 13, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spo... |
| CVE-2026-20844 | HIGH | 7.4 | 0.3% | Jan 13, 2026 | Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-20843 | HIGH | 7.8 | 3.3% | Jan 13, 2026 | Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate pri... |
| CVE-2026-20842 | HIGH | 7 | 0.4% | Jan 13, 2026 | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
| CVE-2026-20840 | HIGH | 7.8 | 4.4% | Jan 13, 2026 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-20839 | MEDIUM | 5.5 | 0.5% | Jan 13, 2026 | Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose informati... |
| CVE-2026-20838 | MEDIUM | 5.5 | 0.6% | Jan 13, 2026 | Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose... |
| CVE-2026-20837 | HIGH | 7.8 | 0.7% | Jan 13, 2026 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
| CVE-2026-20836 | HIGH | 7 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an... |
| CVE-2026-20835 | MEDIUM | 5.5 | 0.5% | Jan 13, 2026 | Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose informatio... |
| CVE-2026-20834 | MEDIUM | 4.6 | 0.7% | Jan 13, 2026 | Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack. |
| CVE-2026-20833 | MEDIUM | 5.5 | 0.4% | Jan 13, 2026 | Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose informati... |
| CVE-2026-20832 | HIGH | 7.8 | 0.5% | Jan 13, 2026 | Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability |
| CVE-2026-20831 | HIGH | 7 | 0.3% | Jan 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized ... |
| CVE-2026-20830 | HIGH | 7 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Managem... |
| CVE-2026-20829 | MEDIUM | 5.5 | 0.5% | Jan 13, 2026 | Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally. |
| CVE-2026-20828 | MEDIUM | 4.6 | 0.6% | Jan 13, 2026 | Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information ... |
| CVE-2026-20827 | MEDIUM | 5.5 | 0.6% | Jan 13, 2026 | Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an... |
| CVE-2026-20826 | HIGH | 7 | 0.3% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Inter... |
| CVE-2026-20825 | MEDIUM | 4.4 | 0.5% | Jan 13, 2026 | Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now