Month: August 2026

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-64916 Microsoft SharePoint Server Spoofing Vulnerability→

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability→

Improper control of generation of code (‘code injection’) in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability→

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-68805 Microsoft Excel Remote Code Execution Vulnerability→

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-66810 Microsoft Office Word Information Disclosure Vulnerability→

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability→

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-65782 Windows Autopilot Elevation of Privilege Vulnerability→