Microsoft has recorded CVE-2026-20875 as a denial-of-service vulnerability affecting the Local Security Authority Subsystem Service (LSASS), and defenders should treat this as a high-priority availability issue for identity-critical hosts until every affected build is patched. Background /...
Microsoft has published an advisory for CVE-2026-20822: a use‑after‑free vulnerability in the Microsoft Graphics Component that can be triggered by an authenticated local user to elevate privileges on affected Windows hosts. Background
The Microsoft Graphics Component (commonly referenced as...