Delta Electronics, a major industrial automation and power management company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication to exploit, potentially allowing attackers with local access to compromise confidentiality, integrity, and availability. The vulnerability can be triggered through user interaction on a local system without elevated privileges, making it particularly dangerous in shared or compromised environments. Security teams should monitor for this advisory through April 2026 and prioritize patching once the vendor releases fixes, especially for systems in critical infrastructure environments where Delta products are commonly deployed.

Microsoft has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires user interaction but no authentication to exploit, potentially allowing attackers to gain complete control over confidentiality, integrity, and availability of affected systems. The vulnerability can only be exploited locally by an unauthenticated user who tricks a legitimate user into performing a specific action. Security teams should prepare for patching when the vendor deadline of April 22, 2026 arrives and monitor for any proof-of-concept exploits in the interim.

Microsoft has a high-severity vulnerability (CVSS 7.0) that requires local access and low-level user privileges to exploit, but once compromised delivers significant impact across confidentiality, integrity, and availability. The attack is not remotely exploitable and does not require user interaction, meaning an authenticated local attacker can directly execute the exploit. Security teams should prioritize patching Microsoft products when the vendor deadline passes in April 2026 and monitor for suspicious local privilege escalation attempts in the interim.

A high-severity vulnerability (CVSS 7.8) has been discovered in Oumi's product that allows local attackers to achieve significant compromise without authentication or user interaction. The attack requires local access to the system but can result in confidentiality, integrity, and availability breaches once exploited. Security teams should monitor for patch availability by the April 2026 deadline and prioritize systems where untrusted local users have access to Oumi software.