CVE-2026-65673 Microsoft Entra Connect Elevation of Privilege Vulnerability

...

CVE-2026-65673

Technical details about CVE-2026-65673 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-64921

CVE-2026-64921 describes a privilege-elevation vulnerability in Microsoft Office SharePoint due to a missing authentication check for a critical function. An authorized attacker could escalate privileges over the network (CVSS v3.1: 8.8, HIGH; Network, Privileges Required: Low; User Interaction: ...

CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

EUVD-2026-56722

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-64910 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-64905

CVE-2026-64905 is a Microsoft Office Word vulnerability described as a buffer over-read that could allow an attacker to execute code locally. Affected product: Microsoft Word. Root cause: unspecified in provided documents beyond the buffer over-read description. Impact: arbitrary code execution w...

CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability

...

EUVD-2026-56698

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2026-56691

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

EUVD-2026-56688

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62911

Technical details (affected software, vulnerable component, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-62887 Windows NTFS Information Disclosure Vulnerability

...

CVE-2026-62888 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-62888 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-62887

CVE-2026-62887 is a local information-disclosure flaw in Windows NTFS due to an out-of-bounds read. The vulnerability allows an authenticated attacker with LOW privileges and LOCAL access to read sensitive data without user interaction. The CVSS v3.1 metrics indicate a MEDIUM base score (5.5), wi...