Month: August 2026

Inclusion of functionality from untrusted control sphere in Visual Studio Code – Python extension allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability→

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability→

Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability→

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability→

Improper neutralization of input during web page generation (‘cross-site scripting’) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability→

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability→

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. Continue reading CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability→