Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally.

The remote Windows host is missing security update 5073457. It is, therefore, affected by multiple vulnerabilities

  - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to     elevate privileges locally. (CVE-2026-20857)

  - An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka     AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL     0x1b2150). An attacker can exploit this to elevate privileges from a medium-integrity process to SYSTEM.
    This can also be used to bypass kernel-level protections such as AV or PPL, because exploit code runs with     high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver)     ransomware campaigns. (CVE-2023-31096)

  - Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability     (CVE-2026-20832)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5073724. It is, therefore, affected by multiple vulnerabilities

  - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to     elevate privileges locally. (CVE-2026-20857)

  - An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka     AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL     0x1b2150). An attacker can exploit this to elevate privileges from a medium-integrity process to SYSTEM.
    This can also be used to bypass kernel-level protections such as AV or PPL, because exploit code runs with     high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver)     ransomware campaigns. (CVE-2023-31096)

  - Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability     (CVE-2026-20832)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5073455. It is, therefore, affected by multiple vulnerabilities

  - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to     elevate privileges locally. (CVE-2026-20857)

  - An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka     AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL     0x1b2150). An attacker can exploit this to elevate privileges from a medium-integrity process to SYSTEM.
    This can also be used to bypass kernel-level protections such as AV or PPL, because exploit code runs with     high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver)     ransomware campaigns. (CVE-2023-31096)

  - Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability     (CVE-2026-20832)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5073723. It is, therefore, affected by multiple vulnerabilities

  - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to     elevate privileges locally. (CVE-2026-20857)

  - An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka     AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL     0x1b2150). An attacker can exploit this to elevate privileges from a medium-integrity process to SYSTEM.
    This can also be used to bypass kernel-level protections such as AV or PPL, because exploit code runs with     high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver)     ransomware campaigns. (CVE-2023-31096)

  - Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability     (CVE-2026-20832)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5073722. It is, therefore, affected by multiple vulnerabilities

  - An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka     AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL     0x1b2150). An attacker can exploit this to elevate privileges from a medium-integrity process to SYSTEM.
    This can also be used to bypass kernel-level protections such as AV or PPL, because exploit code runs with     high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver)     ransomware campaigns. (CVE-2023-31096)

  - Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability     (CVE-2026-20832)

  - A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WDM Driver v6.12.23.0, which allows     low-privileged users to mapping physical memory via specially crafted IOCTL requests . This can be     exploited for privilege escalation, code execution under high privileges, and information disclosure.
    These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious     code. (CVE-2024-55414)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5073450. It is, therefore, affected by multiple vulnerabilities

  - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to     elevate privileges locally. (CVE-2026-20857)

  - An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka     AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL     0x1b2150). An attacker can exploit this to elevate privileges from a medium-integrity process to SYSTEM.
    This can also be used to bypass kernel-level protections such as AV or PPL, because exploit code runs with     high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver)     ransomware campaigns. (CVE-2023-31096)

  - Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability     (CVE-2026-20832)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
283478	KB5073457: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (January 2026)	Nessus	Windows : Microsoft Bulletins	high
283473	KB5073724: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (January 2026)	Nessus	Windows : Microsoft Bulletins	high
283472	KB5073455: Windows 11 version 23H2 Security Update (January 2026)	Nessus	Windows : Microsoft Bulletins	high
283470	KB5073723: Windows 10 version 1809 / Windows Server 2019 Security Update (January 2026)	Nessus	Windows : Microsoft Bulletins	high
283466	KB5073722: Windows 10 Version 1607 / Windows Server 2016 Security Update (January 2026)	Nessus	Windows : Microsoft Bulletins	high
283463	KB5073450: Windows 11 version 22H2 / Windows Server version 23H2 Security Update (January 2026)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2026-20827

medium

Tenable Plugins

high

high

high

high

high

high