https://vulnerability.circl.lu/sightings/feed 2026-08-17T09:05:40.181171+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/747bdd7d-83b5-441f-a427-f779ad10dcb3/export 2026-08-17T09:05:40.203687+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "747bdd7d-83b5-441f-a427-f779ad10dcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31153", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n \u2022 Exploits Windows Defender update mechanism\n \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Used in real-world attacks\n \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n \u2022 Reparse Point + file overwrite\n \u2022 Abuses Defender logic\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Actively exploited\n \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n \u2022 Blocks Defender updates\n \u2022 Disables security protections\n\u2022 Features:\n \u2022 Works with standard user privileges\n \u2022 Critical in attack chains\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n \u2022 Opening a malicious Markdown file\n\u2022 Features:\n \u2022 Improper input validation\n \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n \u2022 Used in exploit chains\n \u2022 Provides leak primitives\n\u2022 Status:\n \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n \u2022 Race condition vulnerability\n\u2022 Status:\n \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n \u2193\nInfo Leak (DWM - CVE-2026-20805)\n \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:33.773595Z"} 2026-08-16T00:00:33.773595+00:00 https://vulnerability.circl.lu/sighting/517aab94-9ffb-4850-ad95-d7c5cc3db667/export 2026-08-17T09:05:40.206369+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "517aab94-9ffb-4850-ad95-d7c5cc3db667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31152", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n \u2022 Exploits Windows Defender update mechanism\n \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Used in real-world attacks\n \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n \u2022 Reparse Point + file overwrite\n \u2022 Abuses Defender logic\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Actively exploited\n \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n \u2022 Blocks Defender updates\n \u2022 Disables security protections\n\u2022 Features:\n \u2022 Works with standard user privileges\n \u2022 Critical in attack chains\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n \u2022 Opening a malicious Markdown file\n\u2022 Features:\n \u2022 Improper input validation\n \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n \u2022 Used in exploit chains\n \u2022 Provides leak primitives\n\u2022 Status:\n \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n \u2022 Race condition vulnerability\n\u2022 Status:\n \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n \u2193\nInfo Leak (DWM - CVE-2026-20805)\n \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.674573Z"} 2026-08-16T00:00:25.674573+00:00 https://vulnerability.circl.lu/sighting/bb952f62-39bc-4ee3-8c92-ed87cf633c29/export 2026-08-17T09:05:40.206512+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bb952f62-39bc-4ee3-8c92-ed87cf633c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31152", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n \u2022 Exploits Windows Defender update mechanism\n \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Used in real-world attacks\n \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n \u2022 Reparse Point + file overwrite\n \u2022 Abuses Defender logic\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Actively exploited\n \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n \u2022 Blocks Defender updates\n \u2022 Disables security protections\n\u2022 Features:\n \u2022 Works with standard user privileges\n \u2022 Critical in attack chains\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n \u2022 Opening a malicious Markdown file\n\u2022 Features:\n \u2022 Improper input validation\n \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n \u2022 Used in exploit chains\n \u2022 Provides leak primitives\n\u2022 Status:\n \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n \u2022 Race condition vulnerability\n\u2022 Status:\n \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n \u2193\nInfo Leak (DWM - CVE-2026-20805)\n \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.307527Z"} 2026-08-15T12:00:03.307527+00:00 https://vulnerability.circl.lu/sighting/ecbe24d0-5c18-4b60-9b1d-af2466d80156/export 2026-08-17T09:05:40.206640+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ecbe24d0-5c18-4b60-9b1d-af2466d80156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31153", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n \u2022 Exploits Windows Defender update mechanism\n \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Used in real-world attacks\n \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n \u2022 Reparse Point + file overwrite\n \u2022 Abuses Defender logic\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Actively exploited\n \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n \u2022 Blocks Defender updates\n \u2022 Disables security protections\n\u2022 Features:\n \u2022 Works with standard user privileges\n \u2022 Critical in attack chains\n\u2022 Status:\n \u2022 PoC publicly available\n \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n \u2022 Opening a malicious Markdown file\n\u2022 Features:\n \u2022 Improper input validation\n \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n \u2022 Used in exploit chains\n \u2022 Provides leak primitives\n\u2022 Status:\n \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n \u2022 Race condition vulnerability\n\u2022 Status:\n \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n \u2193\nInfo Leak (DWM - CVE-2026-20805)\n \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.157959Z"} 2026-08-15T12:00:03.157959+00:00 https://vulnerability.circl.lu/sighting/10c08ed5-86ef-4139-b48c-bf3236492f45/export 2026-08-17T09:05:40.206743+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "10c08ed5-86ef-4139-b48c-bf3236492f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://t.me/ZerodayAlert/603", "content": "Microsoft \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0Day \u0432 Windows\n\n\u26a0\ufe0f CVE-2026-20805 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 ALPC-\u043f\u043e\u0440\u0442. \u041f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432\u0441\u0435\u0433\u043e 5.5, \u043d\u043e Microsoft \u0438 CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd17 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a. \u0423\u0437\u043d\u0430\u0432 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 ASLR \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u0443\u044e \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udccb CISA \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Known Exploited Vulnerabilities \u0441 \u043a\u0440\u0430\u0439\u043d\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 3 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \u0414\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a Microsoft \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n#windows #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #cisa #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:33.081282Z"} 2026-07-26T00:00:33.081282+00:00 https://vulnerability.circl.lu/sighting/19270816-068b-4d43-bc1f-3d02d3d58446/export 2026-08-17T09:05:40.206836+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "19270816-068b-4d43-bc1f-3d02d3d58446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/ZerodayAlert/603", "content": "Microsoft \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0Day \u0432 Windows\n\n\u26a0\ufe0f CVE-2026-20805 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 ALPC-\u043f\u043e\u0440\u0442. \u041f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432\u0441\u0435\u0433\u043e 5.5, \u043d\u043e Microsoft \u0438 CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd17 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a. \u0423\u0437\u043d\u0430\u0432 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 ASLR \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u0443\u044e \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udccb CISA \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Known Exploited Vulnerabilities \u0441 \u043a\u0440\u0430\u0439\u043d\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 3 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \u0414\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a Microsoft \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n#windows #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #cisa #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:10.821033Z"} 2026-07-25T15:00:10.821033+00:00 https://vulnerability.circl.lu/sighting/f022e22e-872a-460f-93e4-7d1349bd0b71/export 2026-08-17T09:05:40.206925+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f022e22e-872a-460f-93e4-7d1349bd0b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438, \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.247491Z"} 2026-07-21T00:00:22.247491+00:00 https://vulnerability.circl.lu/sighting/a7429b93-53b4-439b-8251-d02a33b70801/export 2026-08-17T09:05:40.207022+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a7429b93-53b4-439b-8251-d02a33b70801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438, \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:04.948766Z"} 2026-07-20T19:00:04.948766+00:00 https://vulnerability.circl.lu/sighting/85086977-b3ff-4c40-bcf5-c5655e635ca3/export 2026-08-17T09:05:40.207108+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "85086977-b3ff-4c40-bcf5-c5655e635ca3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7c8a32f4-f021-40d5-aa4e-568b637e420c", "content": "", "creation_timestamp": "2026-06-23T14:03:45.490527Z"} 2026-06-23T14:03:45.490527+00:00 https://vulnerability.circl.lu/sighting/d8293f14-1a48-4e8a-9076-e255f8686d11/export 2026-08-17T09:05:40.207188+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d8293f14-1a48-4e8a-9076-e255f8686d11", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/835bda96-0039-432c-a07c-10d8940d90b8", "content": "", "creation_timestamp": "2026-06-19T12:45:19.833878Z"} 2026-06-19T12:45:19.833878+00:00