8579 matches found
CVE-2026-20945
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
April Patch Tuesday fixes two zero-days, including one under active attack
This month’s patch Tuesday looks to remediate 167 security vulnerabilities including two zero-day vulnerabilities, one of which is known to be actively exploited in the wild. This makes April one of those months where “Patch Tuesday” looks more like “patch the entire stack,” from servers and...
Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities
Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 vulnerabilities, 157 are rated Important, eight are rated Critical, three are rated Moderate, and one i...
PT-2026-33169
🔴 SharePoint CVE-2026-32115 is under active exploitation. Patch now. 🔴 Marimo CVE-2026-29104 targets exposed notebooks for cloud credential theft. 🟡 108 malicious Chrome extensions stole Google and Telegram data. https://t.co/pBWq66uIkZ...
Patch Tuesday - April 2026
Microsoft is publishing 167 vulnerabilities on April 2026 Patch Tuesday. Microsoft is aware of exploitation in the wild for one of today’s vulnerabilities, and public disclosure for one other. Microsoft evaluates 19 of the vulnerabilities published today as more likely to see future exploitation...
Patch Tuesday, April 2026 Edition
Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed "BlueHammer." Separately, Google Chrome fixed its...
EUVD-2026-22587
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-22355
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-32201
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-20945
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-32201
CVE-2026-32201 is an improper input validation vulnerability in Microsoft SharePoint Server that allows an unauthenticated attacker to perform spoofing over a network. The advisory set describes an impact on confidentiality and integrity (viewing sensitive information and modifying disclosed data...
CVE-2026-32201 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-32201
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-32201 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-20945 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-20945 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-20945
CVE-2026-20945 (SharePoint) is an XSS-style vulnerability in Microsoft Office SharePoint where improper input neutralization during web page generation could allow an authorized attacker to spoof another user. Connected documents confirm the issue impacts SharePoint components and is being addres...
Description of the security update for SharePoint Server 2016 Language Pack: April 14, 2026 (KB5002862)
None None...