Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

6 briefs RSS
critical threat

Check Point SmartConsole Authentication Bypass (CVE-2026-16232) Actively Exploited

Check Point released a critical security advisory to address CVE-2026-16232, an authentication bypass vulnerability in SmartConsole, which is actively being exploited in the wild and affects Security Management, Multi-Domain Management, Firewall, and Multi-Domain Log Server products.

exploited PoC SmartConsole +9 cve vulnerability authentication-bypass checkpoint
1t 4c 6i updated
critical threat

Microsoft Addresses Two Actively Exploited Zero-Day Vulnerabilities in July 2026 Patch Tuesday

Microsoft's July 2026 Patch Tuesday addressed 622 vulnerabilities, including two actively exploited zero-day elevation of privilege flaws, CVE-2026-56155 in Active Directory Federation Services and CVE-2026-56164 in SharePoint, allowing local and remote attackers to gain administrative control.

exploited PoC Active Directory Federation Services +23 patch-tuesday zero-day vulnerability microsoft windows sharepoint active-directory-federation-services bitlocker +2
8t 4c 8i updated
critical threat

CVE-2026-63030: Critical Remote Code Execution Vulnerability in WordPress Core

CVE-2026-63030 is a critical unauthenticated remote code execution vulnerability affecting WordPress Core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1, allowing an unauthenticated attacker to execute arbitrary code via the WordPress REST API batch endpoint, potentially leading to complete website compromise.

exploited PoC WordPress Core 6.9.0 +51 wordpress rce web-vulnerability cve
2t 15c 8i updated
high advisory

Microsoft Security Updates — July 2026

Roundup of Microsoft security advisories published in July 2026.

PoC PowerShell +511 roundup
11c 354i updated
high threat

Multiple Vulnerabilities in Microsoft Office Products (June 2026)

CERT-FR has disclosed 31 vulnerabilities in various Microsoft Office products, including CVE-2026-44803 and CVE-2026-47635, which could allow remote code execution, privilege escalation, and data confidentiality compromise.

exploited Microsoft 365 Apps pour Enterprise pour systèmes 32 bits +21 vulnerability microsoft-office remote-code-execution privilege-escalation data-confidentiality windows macos android
3r 4t 5c
critical advisory

Microsoft Word RTF Heap Overflow Vulnerability (CVE-2023-21716)

CVE-2023-21716 is a critical heap-based buffer overflow vulnerability in Microsoft Word 2016's RTF parser, triggered by a malformed RTF file, leading to remote code execution on Windows 7.

Word 2016 cve-2023-21716 rtf heap overflow remote code execution
2r 1t 1c