CVE-2026-27924 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-27924

CVE-2026-27924 is a use-after-free vulnerability in the Desktop Window Manager that allows a locally authenticated attacker to escalate privileges. The issue is tied to Desktop Window Manager (dwm) components on Windows and is described as an elevation of privilege when memory is corrupted after ...

CVE-2026-27924 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-26175

CVE-2026-26175 : Windows Boot Manager security feature bypass via use of an uninitialized resource, enabling a physical attacker to bypass protection. Affected component: Windows Boot Manager; root cause: uninitialized resource handling. Base CVSS 3.1 score 4.6 (PHYSICAL attack, LOW attack comple...

CVE-2026-26175 Windows Boot Manager Security Feature Bypass Vulnerability

...

CVE-2026-26175 Windows Boot Manager Security Feature Bypass Vulnerability

...

CVE-2025-61848

An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.3,...

CVE-2025-68649

The CVE-2025-68649 issue is a path traversal vulnerability in Fortinet products including FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud across multiple 7.x versions (and 7.0/7.2/7.4/7.6 lines). The root cause is an improper limitation of a pathname to a restricted direc...

CVE-2025-61848

CVE-2025-61848 is an SQL injection vulnerability caused by improper neutralization of special elements in Fortinet products (FortiAnalyzer, FortiManager, and their Cloud variants) across multiple 7.x releases. The flaw may allow a privileged authenticated attacker to execute unauthorized code or ...

Description of the security update for SharePoint Server 2016: April 14, 2026 (KB5002861)

None None...

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Windows Boot Manager Security Feature Bypass Vulnerability

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack...

Description of the security update for SharePoint Server 2019: April 14, 2026 (KB5002854)

None None...

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Description of the security update for SharePoint Server 2019 Language Pack: April 14, 2026 (KB5002856)

None None...

Description of the security update for SharePoint Server Subscription Edition: April 14, 2026 (KB5002853)

None None...

MAL-2026-2663 Malicious code in tether-wrk-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e816f71a9a4581a5adacb19f57871ba8a9118bb980fbcb97c74d6b601a7e517f The package tether-wrk-base was found to contain malicious code. Source: ghsa-malware dd91537dad139a68aee6f4c63c4f9afb6bd315f2d76ee0e8e998dde7a421ef4...