Topic

Microsoft Sharepoint

Coverage tagged microsoft sharepoint.

Articles: 1
Desk: 1

Data graphic: SharePoint zero-day CVE-2026-56164, scored 9.8 Critical by NVD against Microsoft's 5.3 Moderate for the same flaw, with the fixed build thresholds for SharePoint Server 2016 16.0.5561.1001 , 2019 16.0.10417.20175 and Subscription Edition 16.0.19725.20434 . A timeline shows exploitation and patches on Jul 14, 2026 and the CISA KEV federal due date of Jul 17, 2026, three days later; SharePoint Online is not affected, and the verdict reads: patching alone is not proof of cleanliness, so hunt first, then harden.

stableResearch Microsoft Sharepoint

Microsoft SharePoint Zero-Day CVE-2026-56164 Under Active Attack: On-Prem Farms Face Unauthenticated Privilege Escalation

Microsoft and CISA confirmed exploitation on 14 July 2026 and shipped same-day patches. SharePoint Online is unaffected; self-hosted farms need action now.

Jul 15 · 6 min