Linux kernel double free in Xen privcmd driver

ISSUE DESCRIPTION The Linux kernel's privcmd driver can be abused to circumvent kernel lockdown secure boot by causing a double free of kernel memory. Note that this operation can be performed by root only, so any further impact on the system like denial of service is not security relevant. IMPAC...

OESA-2026-2079 shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to bypass existing security mechanisms

The vulnerability of the Secure Boot protocol for operating systems running Windows lies in the absence of a necessary encryption step. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms...

April 19, 2026—KB5091572 (OS Build 14393.9062) Out-of-band

None None...

April 19, 2026—KB5091575 (OS Build 20348.5024) Out-of-band

None None...

April 19, 2026—KB5091573 (OS Build 17763.8647) Out-of-band

None None...

The vulnerability in the implementation of the Secure Boot protocol for Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot secure bootloading protocol for the Windows operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 vulnerabilities, 157 are rated Important, eight are rated Critical, three are rated Moderate, and one i...

CVE-2026-32220

CVE-2026-32220 : Improper access control in the Windows Virtualization-Based Security (VBS) Enclave allows an authorized local attacker to bypass a security feature. Affected component: Windows VBS Enclave within the Hyper-V/OS security stack. Documented impact includes local bypass of protection...

CVE-2026-32220 UEFI Secure Boot Security Feature Bypass Vulnerability

...

CVE-2026-32220 UEFI Secure Boot Security Feature Bypass Vulnerability

...

CVE-2026-0390 UEFI Secure Boot Security Feature Bypass Vulnerability

...

CVE-2026-0390

Technical details about CVE-2026-0390 are not publicly provided in the available documents. No information on affected product versions, root cause, exploitability, or remediation is included. Monitor for updates from official sources.

CVE-2026-0390 UEFI Secure Boot Security Feature Bypass Vulnerability

...

KB5082806: Cumulative security update for Internet Explorer: April 14, 2026

None None...

April 14, 2026—KB5083769 (OS Builds 26200.8246 and 26100.8246)

None None...

April 14, 2026—KB5082123 (OS Build 17763.8644)

None None...

April 14, 2026—KB5082127 (Monthly Rollup)

None None...

April 14, 2026—KB5082060 (OS Build 25398.2274)

None None...

April 14, 2026—KB5082052 (OS Build 22631.6936)

None None...