256 matches found
CVE-2025-49706-SharePoint-Spoofing-Vulnerability-Under-Active-Exploitation
🚨 CVE-2025-49706 – SharePoint Spoofing Vulnerability Under Active Exploitation By Aditya Bhatt – VAPT Specialist | Red Teamer 📌 TL;DR Microsoft SharePoint is under active threat. CVE‑2025‑49706, a spoofing vulnerability in SharePoint Server, has evolved from medium-severity to real-world...
Description of the security update for SharePoint Server Subscription Edition: September 08, 2026 (KB5002908)
Description of the security update for SharePoint Server Subscription Edition: September 08, 2026 KB5002908 Applies To SharePoint Server Subscription Edition Summary Important If you're currently running SharePoint Workflow Manager, you must install SharePoint Workflow Manager KB5002799 to your...
Description of the security update for SharePoint Server Subscription Edition: October 13, 2026 (KB5002927)
Description of the security update for SharePoint Server Subscription Edition: October 13, 2026 KB5002927 Applies To SharePoint Server Subscription Edition Summary Important If you're currently running SharePoint Workflow Manager, you must install SharePoint Workflow Manager KB5002799 to your far...
Description of the security update for SharePoint Server Subscription Edition: November 10, 2026 (KB5002945)
Description of the security update for SharePoint Server Subscription Edition: November 10, 2026 KB5002945 Applies To SharePoint Server Subscription Edition Summary Important If you're currently running SharePoint Workflow Manager, you must install SharePoint Workflow Manager KB5002799 to your fa...
CVE-2026-118151: Microsoft Microsoft Exchange Server Subscription Edition RTM: External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges…
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
PT-2026-143723
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server Subscription Edition versions prior to 15.02.2562.057 Description Improper control of code generation allows an authorized attacker to execute code over a network via code injection, which is the process of inserting...
Security Updates for Microsoft SharePoint Server Subscription Edition (November 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an...
CVE-2026-118150: Microsoft Microsoft Exchange Server Subscription Edition RTM: Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate…
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-118157: Microsoft Microsoft Exchange Server Subscription Edition RTM: Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-118149: Microsoft Microsoft Exchange Server Subscription Edition RTM: Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to…
Improper control of generation of code 'code injection' in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-118208: Microsoft Microsoft Exchange Server Subscription Edition RTM: Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
Microsoft SharePoint Server Spoofing
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks...
Microsoft SharePoint Server Privilege Escalation
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Microsoft SharePoint Server Subscription Edition Information Disclosure
The vulnerability of the Microsoft SharePoint Server Subscription Edition package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...
Microsoft SharePoint Server Subscription Edition Spear Phishing
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks...
Microsoft SharePoint Server Privilege Escalation
The vulnerability of the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
Microsoft SharePoint Server Subscription Edition Spear Phishing
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks...
Microsoft SharePoint Server Privilege Escalation
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft SharePoint Server Auth Bypass Info Disclosure
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...
Microsoft SharePoint Server Privilege Escalation
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to improper code generation. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...