Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
Microsoft's October Patch Tuesday fixes 1,413 flaws, including exploited Windows Shell bypass CVE-2026-96951.
84
Product
SharePoint Server
- Mentions · 7d0
- Mentions · 30d4
- All mentions12
- First seenAug 12, 2026
- Last mentioned16d ago
Timeline
12 articles · newest firstMicrosoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft patched a record 1,413 flaws, including exploited Windows Shell bug CVE-2026-96951 now on CISA’s KEV list.
84
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
Microsoft's October 2026 Patch Tuesday fixes 1,413 CVEs, including an exploited Windows Shell zero-day.
86
Warlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical Infrastructure
Warlock ransomware operators still exploit unpatched SharePoint flaws to hit water, telecom, government, and university targets.
78
Microsoft SharePoint Flaw Lets Attackers Execute Code Remotely With Low Privileges
Microsoft patched CVE-2026-65660, an authenticated SharePoint Server remote code execution flaw scored 8.8.
64
Meta patches Muse exploit that let attackers control the AI agent
Meta patches a Muse AI agent zero-day exploit allowing attackers to control the agent, while a Linux KVM flaw enables guest-to-host memory access and a SharePoint flaw enables authenticated remote code execution.
70
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
Researchers show SharePoint CVE-2026-65660 enables authenticated RCE, despite Microsoft first listing it as spoofing.
68
CVE-2026-33824: CISA Flags Windows IKE RCE as Exploited
CISA added four actively exploited vulnerabilities to its KEV catalog, headlined by CVE-2026-33824, a Windows IKE Service Extensions remote code execution flaw.
78
U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog
CISA adds actively exploited flaws in Microsoft IKE, SharePoint, VMware vCenter, and macOS Screen Sharing to KEV catalog, due August 21.
80
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
CISA adds actively exploited SharePoint RCE CVE-2026-45659 (CVSS 8.8) to KEV; an August 11 update confirms ransomware groups are exploiting the flaw.
78
2026-009: Critical Vulnerabilities in Microsoft SharePoint
WatchTowr observed active exploitation of SharePoint RCE CVE-2026-50522 (CVSS 9.8), part of an ongoing wave of exploited on-prem SharePoint flaws patched by Microsoft.
90
2026-004: Critical Vulnerability in SharePoint Exploited
CVE-2026-20963 (CVSS 9.8), an unauthenticated RCE in on-prem SharePoint, was added to CISA's KEV on 18 March 2026 and is actively exploited.
90
Related CVEs
by mentions- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
- CVE-2026-9695110%8.8Windows Shell command injection bypasses a security feature
- CVE-2026-593103%9.8Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2026-3382477%9.8Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension
- CVE-2026-4565980%8.8Authenticated Deserialization RCE in Microsoft SharePoint Server (Actively Exploited)
- CVE-2026-656608%8.8Authenticated Code Injection RCE in Microsoft SharePoint Server
- CVE-2026-214131%9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b
- Untrusted search path in Microsoft .NET Framework
- CVE-2026-2096329%9.8Deserialization RCE in Microsoft SharePoint Exploited in the Wild
Appears with
- Microsoftvendor · 12
- CISAorganization · 8
- Microsoftorganization · 6
- Windowsproduct · 4
- Microsoft Officeproduct · 3
- SharePoint Enterprise Server 2016product · 2
- CERT-EUorganization · 2
- Windows Shellproduct · 2
- Applevendor · 2
- CISAvendor · 2
- Rapid7organization · 2
- SharePoint Server Subscription Editionproduct · 2
- Storm-2603threat actor · 2
- .NET Frameworkproduct · 2
- Anthropicorganization · 2
- VMware vCenterproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.