Skip to main content

CVE-2026-25835

a Pseudo-Random Number Generator (PRNG). vulnerability

Information

MSRC advisory May 31, 2026

Alert details

Source feed
Microsoft MSRC
CVE ID
CVE-2026-25835
Affected products
a Pseudo-Random Number Generator (PRNG). · a a Pseudo-Random Number Generator (PRNG). · a

What happened

Information published.

What it means for your business

a Pseudo-Random Number Generator (PRNG). vulnerability (CVE-2026-25835) was added to Microsoft’s security update guidance. Information published. If you need help checking exposure, call (864) 335-9223.

Sources

Related briefs

Microsoft MSRC

CVE-2026-70338

Microsoft PowerShell Security Feature Bypass vulnerability

Microsoft PowerShell Security Feature Bypass vulnerability (CVE-2026-70338) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-66804

Microsoft Windows Cross Device Service Elevation of Privilege vulnerability

Microsoft Windows Cross Device Service Elevation of Privilege vulnerability (CVE-2026-66804) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-65791

Windows iSCSI Target Service Remote Code Execution vulnerability

Windows iSCSI Target Service Remote Code Execution vulnerability (CVE-2026-65791) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)

CVE-2026-65400

Apple macOS Improper Authentication Vulnerability

Apple macOS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-65400). Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. CISA remediation due date: 2026-08-21. If you need help checking exposure, call (864) 335-9223.

Need help patching?

PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.