CVE-2026-49785High· 7.8▾ TwilightImproper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2018-8120High· 7.0An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Serve…
CVE-2020-3555Medium· 6.8A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affecte…
CVE-2025-14953Low· 3.1A flaw has been found in Open5GS up to 2.7.5
CVE-2026-109144Medium· 5.3A vulnerability was identified in wbond certvalidator up to 0.11.1
CVE-2026-109107Medium· 6.5A weakness has been identified in Wavlink WL-WN592AX6 250422
CVE-2026-109277Low· 3.3ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling