microsoft sharepoint

CISA has added three vulnerabilities to its Known Exploited Vulnerabilities catalog after determining they are being actively exploited: two command-injection flaws in Fortinet FortiSandbox and a Microsoft SharePoint deserialization vulnerability tracked as CVE-2026-58644. For Windows...

Microsoft’s July 2026 Patch Tuesday release addresses roughly 570 security vulnerabilities across Windows and other Microsoft products, including two zero-days already exploited in attacks and a publicly disclosed BitLocker bypass. Windows 11 users should prioritize KB5101650 or KB5099414, while...

CISA is warning administrators that CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164 are being actively exploited against on-premises Microsoft SharePoint Server deployments. The July 14 alert covers every supported on-premises branch—SharePoint Server Subscription Edition, SharePoint Server...

Microsoft lists CVE-2026-45481 as a Microsoft SharePoint Server spoofing vulnerability in its Security Update Guide as of June 10, 2026, but the public-facing signal around the flaw is still thinner than administrators would like for a product that often sits deep inside enterprise identity...

Microsoft has published CVE-2026-47634 as a Microsoft SharePoint Server spoofing vulnerability in the Security Update Guide, and the key signal in the advisory is not just the spoofing label but Microsoft’s confidence that the vulnerability exists and has credible technical grounding. That makes...

Microsoft published CVE-2026-45465 on June 9, 2026, describing an Important-rated Microsoft SharePoint Server spoofing vulnerability in supported on-premises SharePoint Server editions, caused by cross-site scripting and fixed through security updates for Subscription Edition, SharePoint Server...

CISA’s latest addition to the Known Exploited Vulnerabilities Catalog is a reminder that SharePoint remains a high-value target for attackers, especially when a flaw can be turned into code execution, privilege escalation, or post-compromise footholds. On March 18, 2026, the agency added...