CVE-2026-47641 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-47641

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-47639 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-47638 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-47637 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-47637 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-47638 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-47636

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-47636 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-47635

CVE-2026-47635 concerns a type-confusion vulnerability in Microsoft Office components (notably Outlook and Word) that allows an unauthenticated/user-local attacker to execute code locally. The underlying issue is a resource access type mismatch that can lead to remote attack surfaces when process...

CVE-2026-47635 Microsoft Outlook and Word Remote Code Execution Vulnerability

...

CVE-2026-47635 Microsoft Outlook and Word Remote Code Execution Vulnerability

...

CVE-2026-47635

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-47631

The CVE-2026-47631 entry concerns Microsoft Exchange Server with a vulnerability in the rendering of web pages, described as improper neutralization of input during web page generation (cross-site scripting). The underlying issue allows an unauthorized attacker to spoof users over the network. Th...

CVE-2026-47631 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-47631 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-47298 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-41092 Microsoft Kinect Elevation of Privilege Vulnerability

...

CVE-2026-41092 Microsoft Kinect Elevation of Privilege Vulnerability

...

CVE-2026-41092

CVE-2026-41092 describes an improper access control in Microsoft Kinect that enables a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Affected component: Kinect functionality; root cause is insuffic...