CyberSecurity
on April 14, 2026 at 2:00 pm — CVE-2026-20945 Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
on April 14, 2026 at 2:00 pm — CVE-2026-20930 Windows Management Services Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Management Services allows an authorized attacker to elevate privileges locally.
on April 14, 2026 at 2:00 pm — CVE-2026-25250 MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix
Missing cryptographic step in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.