268 matches found
About Elevation of Privilege - Microsoft SharePoint (CVE-2026-56164) vulnerability.
About Elevation of Privilege - Microsoft SharePoint CVE-2026-56164 vulnerability. The vulnerability was disclosed in the July Microsoft Patch Tuesday release on July 14. The vulnerability, related to missing authentication for a critical function CWE-306, allows an unauthenticated attacker to...
The vulnerability of Microsoft Word, Microsoft Office products, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft SharePoint CVE-2026-50522 Post-Exploitation Payload Collection
A collection of payloads, webshells, and HTTP request artifacts observed following exploitation of the Microsoft SharePoint CVE-2026-50522 vulnerability. The repository documents real-world payloads deployed by multiple threat actors rather than providing an exploit for the underlying vulnerabili...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Patch Tuesday - July 2026
Microsoft is publishing 622 vulnerabilities on July 2026 Patch Tuesday, including a record-breaking 416 Windows vulnerabilities. Microsoft is aware of exploitation in the wild for two of the vulnerabilities published today, both of which are listed on CISA KEV, as well as public disclosure for on...
Microsoft Patches a Record 570 Security Flaws
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeonin...
CVE-2026-58277
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-55020
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-55052
CVE-2026-55052 concerns a privilege-elevation flaw in Microsoft SharePoint (Office SharePoint). The description across sources is a missing authorization vulnerability that could let an authorized attacker elevate privileges over a network. Affected components/versions are centered on Microsoft O...
Microsoft SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
Microsoft SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)
Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution RCE against a vulnerable SharePoint server. Today, both Rapid7 and Microsoft ar...
Vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
