14 April 2026

5 results · Clear filters · Feed

• Critical 9.8
  CVE-2026-33824 Exploited Public exploit EPSS 77%

  Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

  Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 14, 2026

  KEV Aug 18, 2026
• Medium 6.5
  CVE-2026-32201 Exploited Public exploit EPSS 44%

  Microsoft SharePoint Server Spoofing Vulnerability

  Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Apr 14, 2026

  KEV Apr 14, 2026
• High 7.8
  CVE-2026-33825 Exploited · Ransomware Public exploit

  Microsoft Defender Elevation of Privilege Vulnerability

  Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Defender Antimalware Platform
  Apr 14, 2026

  KEV Apr 22, 2026
• Medium 4.3
  CVE-2026-32202 Exploited Public exploit EPSS 71%

  Windows Shell Spoofing Vulnerability

  Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Alpine
  Apr 14, 2026

  KEV Apr 28, 2026
• Critical 9.1
  CVE-2026-39808 Exploited Public exploit Scanner template EPSS 93%

  A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …

  Fortinet FortiSandbox FortiSandbox PaaS Network devices
  Apr 14, 2026

  KEV Jul 16, 2026