Microsoft SharePoint Server 0

Cybersecuritynews •Guru Baran • April 15, 2026

A critical zero-day spoofing vulnerability in Microsoft SharePoint Server is being actively exploited in the wild, Microsoft confirmed on April 14, 2026, as part of its monthly security update cycle. Tracked as CVE-2026-32201, the flaw affects multiple versions of SharePoint Server and has been assigned a CVSS base score of 6.5 (Important), with an adjusted […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BlueHammer Zero-Day Exploit Released, Exposing Windows Users to Privilege Escalation A security researcher, known as Chaotic Eclipse, has publicly released exploit code for a zero-day vulnerability in Windows, dubbed BlueHammer, allowing local privilege escalation to SYSTEM or elevated administrator privileges. The exploit targets a flaw in the Windows Defender update mechanism and has no available patch, leaving potentially over 1 billion Windows users vulnerable. The researcher expressed frustration with Microsoft's Security Response Center (MSRC) regarding their handling of the vulnerability disclosure process, leading to the public release of the exploit. Will Dormann, a principal vulnerability analyst, confirmed the exploit's functionality, noting that it is not entirely reliable and primarily affects local user accounts. The exploit code is available on GitHub, with significant interest from both security researchers and potential attackers. Microsoft has not yet issued a statement regarding a patch or a timeline for addressing the vulnerability. The exploit's release has raised concerns about the implications for cybersecurity, as attackers could leverage this flaw for malicious purposes. 130 sources 67

Extracted Entities

Microsoft SharePoint Server 0

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)