News & Sicurezza

CVE ID :CVE-2026-33114 Published : April 14, 2026, 6:17 p.m. | 1 hour, 40 minutes ago Description :Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. Severity: 8.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-33104 Published : April 14, 2026, 6:17 p.m. | 1 hour, 40 minutes ago Description :Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Severity: 7.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-33103 Published : April 14, 2026, 4:58 p.m. | 59 minutes ago Description :None Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-33100 Published : April 14, 2026, 4:58 p.m. | 59 minutes ago Description :None Severity: 7.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-33101 Published : April 14, 2026, 4:58 p.m. | 59 minutes ago Description :None Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-33099 Published : April 14, 2026, 4:58 p.m. | 59 minutes ago Description :None Severity: 7.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-32225 Published : April 14, 2026, 4:58 p.m. | 59 minutes ago Description :None Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Ivanti Neurons for ITSM Vulnerabilities Allow Remote Attacker to Obtain User Sessions Ivanti has released security updates addressing two medium-severity vulnerabilities in Ivanti Neurons for ITSM (N-ITSM), its on-premise IT service management platform. The flaws, if exploited, could a ... Read more Published Date: Apr 14, 2026 (19 hours, 52 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-4914 CVE-2026-4913

CISA Warns of Microsoft Exchange and Windows CLFS Vulnerabilities Exploited in Attacks The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to organizations regarding two severe Microsoft vulnerabilities. On April 13, 2026, the agency officially added ... Read more Published Date: Apr 14, 2026 (20 hours, 13 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2023-36424 CVE-2023-21529

Synology SSL VPN Client Vulnerabilities Let Remote Attackers Access Sensitive Files Synology reveals two severe SSL VPN Client flaws that could let remote attackers steal sensitive files and intercept network traffic. The vulnerabilities affect users running older versions of the sof ... Read more Published Date: Apr 14, 2026 (20 hours, 19 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2021-47961 CVE-2021-47960

Critical FortiSandbox Vulnerabilities Allow Attackers to Execute Unauthorized Commands Fortinet has disclosed two critical security vulnerabilities affecting its FortiSandbox platform, both carrying a CVSSv3 score of 9.1. The flaws, published on April 14, 2026, could allow unauthenticat ... Read more Published Date: Apr 14, 2026 (20 hours, 34 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-39813 CVE-2026-39808

New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released Two high-severity security vulnerabilities have been disclosed in Composer, a package manager for PHP, that, if successfully exploited, could result in arbitrary command execution. The vulnerabilities ... Read more Published Date: Apr 14, 2026 (18 hours, 48 minutes ago) Vulnerabilities has been mentioned in this article.