Security Bulletin ASB-2026-07

This month's release addresses 42 vulnerabilities, 6 of which are rated Critical. Of particular note is CVE-2026-20114, a privilege escalation flaw in the kernel driver component that is being actively exploited in the wild. Customers are strongly urged to apply this update as soon as possible; no workaround is currently available for this issue. Two other Critical vulnerabilities affect the browser rendering engine and could allow remote code execution if a user visits a specially crafted webpage — user interaction is required for exploitation. This bulletin supersedes all previous bulletins for the affected product line. As always, we recommend testing updates in a staging environment before broad deployment, though given the active exploitation of CVE-2026-20114, we recommend expediting this rollout.

Question 1 of 5