3155 matches found
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
...
Patch Tuesday - August 2026
Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever...
CVE-2026-70321
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-65665
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-63520
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
CVE-2026-62917
CVE-2026-62917 concerns Microsoft SharePoint (Office SharePoint) with an improper input validation flaw. The vulnerability allows an authorized attacker to perform spoofing over a network. Documents identify the affected product as SharePoint Server and describe the root cause as input validation...
CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-70326
CVE-2026-70326 describes a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint that enables an authorized attacker to elevate privileges over a network . Publicly documented details indicate the affected product is SharePoint Server, with the underlying impact being el...
CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-66805
A CVE-2026-66805 entry exists with conflicting descriptions across sources. The connected Red Hat CVE details describe a flaw in the console component of a managed-cluster hub: an attacker who can write to container logs can inject malicious code into the hub console user’s browser session by vie...
CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-64916
CVE-2026-64916 affects Microsoft Office SharePoint Server and relates to improper neutralization of input during web page generation (XSS), enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 4.6 (Medium) with Network access, Low attack complexity, Low privileges r...
CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability
...
EUVD-2026-56702
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...