on April 14, 2026 at 2:00 pm — CVE-2026-20930 Windows Management Services Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Management Services allows an authorized attacker to elevate privileges locally.
on April 14, 2026 at 2:00 pm — CVE-2026-25250 MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix
Missing cryptographic step in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
on April 14, 2026 at 2:00 pm — CVE-2026-23653 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Improper neutralization of special elements used in a command (‘command injection’) in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.
on April 14, 2026 at 2:00 pm — CVE-2026-25184 Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Applocker Filter Driver (applockerfltr.sys) allows an authorized attacker to elevate privileges locally.
on April 14, 2026 at 2:00 pm — CVE-2026-20945 Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.