Microsoft SharePoint Server - Authentication Bypass

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. id: CVE-2025-49706 info: name: Microsoft SharePoint Server - Authentication Bypass author: daffainfo severity: medium description: | Improper authentication in Microsoft Offi...

Out-of-Bounds Read in CMS Password-Based Decryption

...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE...

CVE-2026-47638 Microsoft SharePoint Server Spoofing Vulnerability

...

Exploit for Double Free in Microsoft

CVE-2026-26179 PoC for CVE-2026-26179 / ZDI-26-276, my very ow...

Exploit for Improper Input Validation in Microsoft

monikerlinktest cve-2024-21413 1. set up tun0 on router via o...

CVE-2026-35439

CVE-2026-35439 is a remote code execution vulnerability in Microsoft SharePoint Server caused by deserialization of untrusted data. An authorized attacker can exploit this over a network to execute code on affected systems. The CVE is associated with SharePoint Server (on‑premises) and the approv...

Data Deduplication Elevation of Privilege Vulnerability

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally...

Exploit for Insufficient Granularity of Access Control in Microsoft

CVE-20...

CVE-2026-35240

...

CVE-2026-35238

...

CVE-2026-32091

CVE-2026-32091 is a Microsoft elevation of privilege vulnerability in the Brokering File System with a CVSS 3.1 base score of 8.4 (HIGH). It is a local, no-user-interaction attack requiring no privileges, with high impact on confidentiality, integrity, and availability. The exploitation status is...

CVE-2026-20945 Microsoft SharePoint Server Spoofing Vulnerability

...

VulnCheck KEV: CVE-2023-21529

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2026-21716

...

CVE-2026-21714

...

CVE-2026-34714

...

CVE-2026-32194

CVE-2026-32194 affects Microsoft Bing Images and is described as an instance of improper neutralization of command elements leading to remote code execution. The connected sources consistently identify command injection as the root cause affecting Microsoft Bing Images, with high-severity impact ...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-59284-PoC Proof of con...

CVE-2026-25167

CVE-2026-25167 is a local elevation-of-privilege vulnerability described as affecting a Microsoft component referred to as the Brokering File System. The CVSS 3.1 base score is 7.4 (HIGH) with Local attack vector, High impact on confidentiality, integrity, and availability, and requirements of ze...