CVE-2026-63520 2

Vulnerability (CVE)

Researchers Disclose AI-Assisted Share Point Exploit Chain Reaching Unauthenticated RCE

Researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, without a valid account, tracked as CVE-2026-55040 (CVSS 9.1) and affecting SharePoint Server Subscription Edition, 2019, and 2016. Rapid7 chained that...

Identity & Access Management

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Cyber Risks The Hacker News

Microsoft released its monthly security updates on Tuesday, closing 398 new CVEs, 62 of them rated Critical, including CVE-2026-68820, a use-after-free in the afd.sys Windows kernel driver that Microsoft flags as under active exploitation. That flaw...

Vulnerabilities & Patching