CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-62914

CVE-2026-62914 is a Microsoft Exchange Server vulnerability involving improper neutralization of input during web page generation (XSS) that allows an authorized attacker to spoof over the network. Affected product: Microsoft Exchange Server. Core issue: cross-site scripting due to input handling...

CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability

...

CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability

...

EUVD-2026-56382

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-62766

CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...

CVE-2026-61928 Windows Hello Tampering Vulnerability

...

CVE-2026-61928 Windows Hello Tampering Vulnerability

...

CVE-2026-61928

An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...

EUVD-2026-56326

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-56325

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61356

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-59135

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

EUVD-2026-56313

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability

...

CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-63516

Deserialization of untrusted data in Microsoft Office SharePoint is the root cause of CVE-2026-63516, leading to spoofing over a network by an authorized attacker. Affected component: SharePoint Server (Microsoft Office SharePoint). CVE notes that exploitation is possible through network access w...