CVE-2026-20827

by | Jan 13, 2026

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-20826

by | Jan 13, 2026

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-20825

by | Jan 13, 2026

Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2026-20824

by | Jan 13, 2026

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-20823

by | Jan 13, 2026

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.