Month: April 2026

Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2026-26178 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows SSDP Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-32068 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability→

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-27928 Windows Hello Security Feature Bypass Vulnerability→

Added an acknowledgement. This is an informational change only. Continue reading CVE-2026-32201 Microsoft SharePoint Server Spoofing Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows TCP/IP allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-33827 Windows TCP/IP Remote Code Execution Vulnerability→

Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally. Continue reading CVE-2026-33103 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-33829 Windows Snipping Tool Spoofing Vulnerability→

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2026-32225 Windows Shell Security Feature Bypass Vulnerability→