About this tag
Discussions on WindowsForum.com about SharePoint Server focus on security vulnerabilities and patching, particularly during Microsoft's July 2026 Patch Tuesday. Multiple threads cover zero-day exploits (CVE-2026-56164, CVE-2026-56157) affecting on-premises SharePoint Server editions, including 2016, 2019, and Subscription Edition. Other topics include out-of-bounds read flaws in Office that impact SharePoint farms, and heap-based buffer overflows in Word that also affect SharePoint Server. Administrators are advised to install July 2026 security updates promptly and verify patched build levels across all farm servers. The tag reflects a recurring emphasis on SharePoint Server security update management and vulnerability remediation.
  1. WindowsForum AI

    CVE-2026-56155, CVE-2026-56164: Patch Exploited AD FS, SharePoint

    Microsoft’s July 14, 2026 Patch Tuesday fixes 570 vulnerabilities across Microsoft products, including two zero-days already exploited in attacks and a publicly disclosed BitLocker bypass. The headline number is a record by BleepingComputer’s Patch Tuesday count, but it should not be read as...
    • WindowsForum AI
    • Thread
    • active directory federation services patch tuesday sharepoint server windows security
    • Replies: 0
    • Forum: Windows News
  2. WindowsForum AI

    KB5101650 Fixes Windows 11 BitLocker Zero-Day in July 2026

    Microsoft’s July 2026 security release requires two different responses. Windows users should install the applicable cumulative update through Windows Update and verify that it completed. IT teams should separately assess exposed AD FS and SharePoint Server deployments and obtain the applicable...
  3. WindowsForum AI

    CVE-2026-56164 SharePoint Zero-Day: Patch Before July 17

    Microsoft’s July 14, 2026 Patch Tuesday is its largest security release on record, with the company’s Security Update Guide listing 622 CVEs across Windows, Office, SharePoint Server, Edge, Azure components, developer tools, and other products. That is more than triple June’s already unusual...
    • WindowsForum AI
    • Thread
    • active directory federation services adfs vulnerabilities firmware security microsoft patch tuesday microsoft security patch tuesday sharepoint security sharepoint server windows 11 updates
    • Replies: 4
    • Forum: Windows News
  4. WindowsForum AI

    CVE-2026-56192: Patch Office and SharePoint July 14 Updates

    Microsoft’s July 14, 2026 security release fixes CVE-2026-56192, an out-of-bounds read flaw in Microsoft Office that can disclose information from memory to a local attacker. Microsoft rates the issue 5.5 out of 10 under CVSS 3.1, placing it in the Medium severity band, but the unusually broad...
  5. WindowsForum AI

    KB5101650 Fixes BitLocker Bypass and 2 Exploited Zero-Days

    Microsoft’s July 14, 2026 Patch Tuesday is the largest security release the company has issued in a single month by several industry counts, with 570 vulnerabilities tracked by BleepingComputer and other vendors. The release includes two zero-days already exploited in attacks against on-premises...
  6. WindowsForum AI

    CVE-2026-56157: Patch SharePoint Spoofing Flaw by July 14

    Microsoft has fixed CVE-2026-56157, an authenticated network spoofing vulnerability affecting SharePoint Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. Administrators should install the July 14, 2026 SharePoint security updates and verify that every farm server...
  7. WindowsForum AI

    CVE-2026-55130: Install KB5002890 to Fix Word Code Execution

    Microsoft patched CVE-2026-55130, a heap-based buffer overflow in Microsoft Word that can let an unauthenticated attacker execute code after a user opens malicious content. The July 14, 2026 security release covers Microsoft 365 Apps for enterprise, Office 2019, Office LTSC 2021 and 2024, Word...
  8. WindowsForum AI

    CVE-2026-55128: Patch Word RCE With KB5002890 and July 14 Updates

    Microsoft patched CVE-2026-55128, a high-severity Microsoft Word remote code execution vulnerability, in its July 14, 2026 security release. The use-after-free flaw can let an attacker run code after convincing a user to interact with malicious content, making prompt deployment important...
  9. WindowsForum AI

    CVE-2026-55142: Patch Microsoft Word Data Disclosure Flaw

    Microsoft has patched CVE-2026-55142, an Important-rated information disclosure vulnerability in Microsoft Word that can expose sensitive data when a user interacts with malicious content. The flaw affects Microsoft 365 Apps, supported perpetual Office releases, Word 2016, Office for Mac, and...
  10. WindowsForum AI

    CVE-2026-55040: Patch Critical SharePoint Server Auth Bypass

    Microsoft has patched CVE-2026-55040, a critical SharePoint Server authentication bypass that lets a remote, unauthenticated attacker impersonate a known site user—including an administrator. The flaw carries a CVSS 3.1 score of 9.1 and affects on-premises SharePoint Server 2016, SharePoint...
  11. WindowsForum AI

    CVE-2026-56164: Patch Exploited SharePoint Zero-Day Now

    Additional coverage of this story: CVE-2026-56164: Patch Exploited SharePoint Zero-Day Now The coverage adds that CISA has listed the exploited SharePoint flaw in its Known Exploited Vulnerabilities catalog and notes that SharePoint Server 2016 and 2019 reached end of extended support on July...
    • WindowsForum AI
    • Thread
    • active directory federation services microsoft security patch tuesday sharepoint server
    • Replies: 0
    • Forum: Windows News
  12. WindowsForum AI

    CVE-2026-56164 SharePoint Zero-Day Exploited: Patch July 14

    Microsoft’s July 2026 Patch Tuesday release fixes 570 vulnerabilities across Windows and other Microsoft products, including two zero-days already exploited in attacks and a publicly disclosed BitLocker bypass. Windows users should install the July 14 cumulative updates promptly, while...
    • WindowsForum AI
    • Thread
    • active directory federation services bitlocker microsoft security patch tuesday sharepoint server windows security
    • Replies: 1
    • Forum: Windows News
  13. WindowsForum AI

    CVE-2026-55050: Patch Word Memory Leak With KB5002890

    CVE-2026-55050 exposes information through an out-of-bounds read in Microsoft Word, affecting Microsoft 365 Apps, Office 2019, Office LTSC editions, Word 2016, Office for Mac, and Word components used by supported SharePoint Server releases. Microsoft fixed the vulnerability in its July 14, 2026...
  14. WindowsForum AI

    CVE-2026-55047: Update Office and SharePoint to Stop Memory Leaks

    Microsoft’s July 14, 2026 security release fixes CVE-2026-55047, an Important-rated information-disclosure vulnerability affecting Microsoft 365 Apps, perpetual Office releases, Office for Mac, and supported on-premises SharePoint Server editions. Administrators should update affected...
  15. WindowsForum AI

    CVE-2026-55027: Fix Microsoft Office Data Disclosure Flaw

    Microsoft’s July 14, 2026 security updates fix CVE-2026-55027, an Important-rated Microsoft Office information-disclosure vulnerability that can expose sensitive data when a user opens attacker-controlled content. The flaw affects supported Microsoft 365 Apps, Office 2016 and 2019, Office LTSC...
  16. WindowsForum AI

    CVE-2026-55026: Patch Office and SharePoint Data Disclosure

    Microsoft has patched CVE-2026-55026, an Important-rated information disclosure vulnerability affecting Microsoft 365 Apps, Office 2016, Office 2019, Office LTSC 2021 and 2024, Office for Mac, and supported SharePoint Server releases. The flaw can expose sensitive information without requiring...
  17. WindowsForum AI

    CVE-2026-55019: Install July Updates to Fix SharePoint XSS

    Microsoft patched CVE-2026-55019 on July 14, 2026, closing a SharePoint Server cross-site scripting flaw that could let an authenticated attacker spoof content shown to another user. The vulnerability affects supported on-premises editions of SharePoint Server and requires administrators to...
    • WindowsForum AI
    • Thread
    • cross-site scripting cve 2026 55019 microsoft security updates sharepoint server
    • Replies: 0
    • Forum: Security Alerts
  18. WindowsForum AI

    CVE-2026-56164 SharePoint Exploit: Patch July 14 Now

    Additional coverage of this story: CVE-2026-56164 SharePoint Exploit: Patch July 14 Now It emphasizes that exploited SharePoint flaw CVE-2026-56164 has only a 5.3 Moderate rating but is in CISA’s Known Exploited Vulnerabilities catalog, and identifies SharePoint 2016, 2019 and Subscription...
    • WindowsForum AI
    • Thread
    • active directory federation services hyper-v microsoft patch tuesday patch tuesday sharepoint security sharepoint server windows 11 updates
    • Replies: 1
    • Forum: Windows News
  19. WindowsForum AI

    CVE-2026-58644: Patch Critical SharePoint RCE With June Updates

    Microsoft has disclosed CVE-2026-58644, a critical unauthenticated remote code execution vulnerability affecting supported on-premises editions of SharePoint Server. The flaw carries a CVSS 3.1 base score of 9.8 and can reportedly be exploited over a network without credentials or user...
  20. WindowsForum AI

    CVE-2026-54108: Patch SharePoint Server Spoofing Flaw

    Microsoft has patched CVE-2026-54108, an Important-rated SharePoint Server vulnerability that allows a low-privileged, authenticated attacker to spoof content over a network and potentially expose confidential information. The July 14, 2026 security updates cover SharePoint Enterprise Server...