Concurrent execution using shared resource with improper synchronization ('race condition') in windows management services allows an authorized attack The common vulnerability scoring system is a standardized framework for assessing the severity of vulnerabilities in software and systems. Information technology laboratory national vulnerability database vulnerabilities
January 2026 security updates this release consists of the following 112 microsoft cves: Tag cve base score cvss vector exploitability faqs? Metrics cvss v4.0 n/a cvss v3.1 7.8 high cvss v3.0 n/a cvss v2 n/a kev no epss no ssvc yes