Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network. Action : Apply mitigations in accordance with vendor instructions, ensuring complianc…
Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network. Action : Apply mitigations in accordance with vendor instructions, ens…
Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network. Action : Apply mitigations in accordance with vendor instruction…
Le 14 juillet 2026, à l'occasion de sa mise à jour mensuelle, Microsoft a publié, entre autres, des correctifs pour deux vulnérabilités critiques affectant SharePoint. Les vulnérabilités CVE-2026-50522 et CVE-2026-58644…
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Action : Apply mitigations in accordance with vendor instructions, ens…
Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network. Action : Apply mitigations in accordance with vendor …
**[Mise à jour du 23 juillet 2025]** Le 20 juillet 2025, Microsoft a publié des correctifs pour une vulnérabilité de type limitation insuffisante d'un chemin d'accès à un répertoire restreint, aussi appelé *path travers…