Microsoft security advisory – October 2026 monthly rollup (AV26-1038)
Canada's Cyber Centre urges patching Microsoft's October 2026 updates after exploited CVE-2026-96951 entered CISA's KEV.
74
Product
Microsoft SharePoint
- Mentions · 7d0
- Mentions · 30d4
- All mentions8
- First seenAug 19, 2026
- Last mentioned16d ago
Timeline
8 articles · newest firstThe October 2026 Security Update Review
ZDI's October 2026 review lists dozens of critical Microsoft Office, Azure, Exchange, and Windows flaws.
74
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
Microsoft patched CVE-2026-96940, an Exchange flaw that lets authenticated attackers read other users' mailboxes.
71
'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries
A Chinese group is deploying Warlock ransomware against critical infrastructure via unpatched SharePoint flaws.
78
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
CISA says attackers are exploiting critical WSO2 and Adobe Commerce flaws plus SharePoint and MikroTik bugs.
84
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft's September Patch Tuesday fixed a record 974 flaws, including two Windows privilege-escalation zero-days actively exploited and added to CISA's KEV catalog.
85
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Rapid7 published technical analysis of CVE-2026-63520, a remote code execution vulnerability in Microsoft SharePoint.
55
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
CISA added four critical actively exploited flaws to KEV: macOS Screen Sharing, SharePoint, VMware vCenter, and Microsoft IKE, with APT and ransomware use.
86
Related CVEs
by mentions- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2026-7136290%9.1Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento)
- CVE-2026-9695110%8.8Windows Shell command injection bypasses a security feature
- Heap buffer overflow in Microsoft QUIC allows remote code execution
- Use-after-free remote code execution in Microsoft PowerPoint
- CVE-2026-969403%8.8Weak authorization privilege escalation in Microsoft Exchange Server
- Heap Buffer Overflow in Microsoft Office Visio
- Incorrect authorization RCE in Active Directory Domain Services
- Network stack buffer overflow RCE in Microsoft Exchange
- CVE-2026-55007<1%8.1Double Free Enables Unauthenticated RCE in Microsoft Exchange Server
Appears with
- Microsoftvendor · 8
- Microsoftorganization · 5
- Microsoft Exchange Serverproduct · 4
- CISAorganization · 3
- Warlockmalware · 2
- Windowsproduct · 2
- Symantecorganization · 2
- Zero Day Initiativeorganization · 2
- Cybersecurity and Infrastructure Security Agencyorganization · 2
- Rapid7organization · 2
- Microsoft Officeproduct · 2
- Broadcomvendor · 2
- Magentoproduct · 1
- Chinese-speaking threat actorthreat actor · 1
- Microsoft Windowsproduct · 1
- Azure API Centerproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.