CVE-2026-21742

Fortinet FortiSOAR products are affected by CVE-2026-21742, a cleartext transmission vulnerability that could allow an authenticated attacker to view cleartext passwords in responses for Secure Message Exchange and Radius queries when configured. Affected: FortiSOAR PaaS versions 7.6.0–7.6.3, 7.5...

KB5082806: Cumulative security update for Internet Explorer: April 14, 2026

KB5082806: Cumulative security update for Internet Explorer: April 14, 2026 Important Certain versions of Microsoft Internet Explorer have reached the end of support. Note that some versions of Internet Explorer may be supported past the latest OS end date when Extended Security Updates ESUs are...

April 14, 2026—KB5082200 (OS Builds 19045.7184 and 19044.7184)

April 14, 2026—KB5082200 OS Builds 19045.7184 and 19044.7184 Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business...

April 14, 2026—KB5082123 (OS Build 17763.8644)

April 14, 2026—KB5082123 OS Build 17763.8644 Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the past...

April 14, 2026—KB5082198 (OS Build 14393.9060)

April 14, 2026—KB5082198 OS Build 14393.9060 Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the past...

April 14, 2026—KB5083769 (OS Builds 26200.8246 and 26100.8246)

April 14, 2026—KB5083769 OS Builds 26200.8246 and 26100.8246 This cumulative update for Windows 11, version 25H2 and 24H2 KB5083769, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences...

April 14, 2026—KB5083768 (OS Build 28000.1836)

April 14, 2026—KB5083768 OS Build 28000.1836 ​​​​​This security update for Windows 11, version 26H1 KB5083768, includes the latest security improvements, along with non-security updates from last month’s optional preview release. To learn more about differences between security updates, optional...

April 14, 2026—KB5082063(OS Build 26100.32690)

April 14, 2026—KB5082063OS Build 26100.32690 ​​​​​This cumulative update for Windows Server 2025 KB5082063, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences between security updates,...

April 14, 2026—KB5082052 (OS Build 22631.6936)

April 14, 2026—KB5082052 OS Build 22631.6936 ​​​​​This cumulative update for Windows 11, version 23H2 KB5082052, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences between security update...

April 14, 2026—KB5082126 (Monthly Rollup)

April 14, 2026—KB5082126 Monthly Rollup Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012 R2. For a successful installation, please make sure all Subset of endpoints for ESU only...

April 14, 2026—KB5082127 (Monthly Rollup)

April 14, 2026—KB5082127 Monthly Rollup Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012. For a successful installation, please make sure all Subset of endpoints for ESU only ar...

April 14, 2026—KB5082060 (OS Build 25398.2274)

April 14, 2026—KB5082060 OS Build 25398.2274 This cumulative update for Windows Server, version 23H2 KB5082060, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences between security updates...

April 14, 2026—KB5082142 (OS Build 20348.5020)

April 14, 2026—KB5082142 OS Build 20348.5020 This cumulative update for Windows Server 2022 KB5082142, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences between security updates, optiona...

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

UEFI Secure Boot Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix

Missing cryptographic step in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

PoC

Fabricked: Breaking AMD SEV-SNP via Infinity Fabric !CVE-20...

Malicious code in cjs-biginteger (npm)

big.js typosquat campaign - SSH backdoor implantation, credential and crypto wallet theft --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18a38aa59b5edbd05dbdf229f4d013446f970fe18b41e54ffc1c24a926d2bd The package cjs-biginteger was found to contain malicious...

Malicious code in bjs-lint-builders (npm)

big.js typosquat campaign - SSH backdoor implantation, credential and crypto wallet theft --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ff31ee3bf86e4aecefc3ed40ae1647028f7fd482df4c617731ebfd75cad027 The package bjs-lint-builders was found to contain maliciou...

MAL-2026-2880 Malicious code in bjs-lint-builder (npm)

big.js typosquat campaign - SSH backdoor implantation, credential and crypto wallet theft --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4578f36842f930e2a5e6a4129c10eb87bf1005fe8cbdf05ffb9fdc2fe43ad8 The package bjs-lint-builder was found to contain malicious...