CVE-2026-26143 Microsoft PowerShell Security Feature Bypass Vulnerability

...

CVE-2026-20928 Windows Recovery Environment Security Feature Bypass Vulnerability

...

CVE-2026-32220 UEFI Secure Boot Security Feature Bypass Vulnerability

...

CVE-2026-32220 UEFI Secure Boot Security Feature Bypass Vulnerability

...

CVE-2026-0390 UEFI Secure Boot Security Feature Bypass Vulnerability

...

CVE-2026-27906

Summary: CVE-2026-27906 (Windows Hello) is a local security feature bypass caused by improper input validation, enabling an authenticated user with high privileges to bypass a security feature. The vulnerability affects Windows Hello components and has an indicative CVSSv3.1 base score of 4.4 (At...

CVE-2026-26175 Windows Boot Manager Security Feature Bypass Vulnerability

...

CVE-2026-26175

CVE-2026-26175 : Windows Boot Manager security feature bypass via use of an uninitialized resource, enabling a physical attacker to bypass protection. Affected component: Windows Boot Manager; root cause: uninitialized resource handling. Base CVSS 3.1 score 4.6 (PHYSICAL attack, LOW attack comple...

CVE-2026-26149

Technical details about CVE-2026-26149 are not publicly provided in the available documents. Monitor for updates from Microsoft and changelogs to learn affected components, impact, and remediation.

CVE-2026-26149 Microsoft Power Apps Desktop Client Spoofing Vulnerability

...

Windows BitLocker Security Feature Bypass Vulnerability

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally...

Microsoft PowerShell Security Feature Bypass Vulnerability

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

Windows Recovery Environment Security Feature Bypass Vulnerability

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

Windows Hello Security Feature Bypass Vulnerability

Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally...

April 14, 2026-KB5082421 Cumulative Update for .NET Framework 4.8.1 for Windows 11, version 26H1

None None...

April 14, 2026-KB5082419 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 10 Version 21H2 and Windows 10 Version 22H2

None None...

PT-2026-32730

Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description Improper neutralization of escape, meta, or control sequences allows an authorized attacker to bypass a security feature over a network. Recommendations At the moment, there is n...

PT-2026-32814

CVE-2026-32088 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Biometric Service allows an unauthorized attacker to bypass a s… https://t.co/RESeqOUtu9...

PT-2026-32718

Name of the Vulnerable Software and Affected Versions Windows Recovery Environment Agent affected versions not specified Description Improper removal of sensitive information before storage or transfer in the Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security...