Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.
Microsoft
CVE-2026-20825 CVSS 4.4
2026-01-13 08:00 UTC · 2026-01-13 05:00 -03
Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.
Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.