Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On September 8, 2026, multiple CVEs were disclosed affecting various Microsoft products, including SharePoint and Office. Key vulnerabilities include improper access controls, buffer overflows, and command injections, which could allow unauthorized code execution and information disclosure. CVE-2026...
On September 8, 2026, Microsoft released a record-breaking 974 patches for vulnerabilities across its products, including two actively exploited zero-day vulnerabilities: CVE-2026-81963 and CVE-2026-85880. These vulnerabilities allow local attackers to escalate privileges to SYSTEM level, posing sig...
Security researchers from Doyensec discovered vulnerabilities in SFAPE.dll, a VBS enclave in Windows, allowing local code execution within Isolated User Mode (VTL1). The vulnerabilities were chained to exploit memory corruption, undermining the enclave's isolation guarantees. Microsoft addressed the...
