CVE-2026-65660

HIGH8.8

Published 2026-08-11 · Updated 2026-08-27 · Source secure@microsoft.com

Description

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-94

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660

View on NVD

Related CVEs

Same severity, most recent

CVE-2026-95619
A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the C++ `new` operator. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability.
2026-09-22 · score 7.7
CVE-2026-95271
A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function check_authentication of the file changedetectionio/flask_app.py of the component Authentication Hook. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
2026-09-22 · score 7.3
CVE-2026-75791
Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API.
2026-09-22 · score 8.6
CVE-2026-94117
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3.
2026-09-22 · score 7.6
CVE-2026-25265
Privilege escalation due to weak configuration while temporary file handling.
2026-09-22 · score 8.8