CVE-2026-63514

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

• CWE-502

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63514Patch, Vendor Advisory

Published

Aug 11, 2026

Last Modified

Aug 12, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6349The  iSherlock developed by HGiga  has an OS Command Injecti…9.8
• CVE-2026-6350MailGates/MailAudit developed by Openfind has a Stack-based …9.8
• CVE-2026-63508Missing authentication for critical function in Microsoft Pl…10
• CVE-2026-6351MailGates/MailAudit developed by Openfind has a CRLF Injecti…8.7
• CVE-2026-63512Incorrect authorization in Microsoft Office SharePoint allow…6.5
• CVE-2026-63513Heap-based buffer overflow in Microsoft Office allows an una…7.8
• CVE-2026-63515Out-of-bounds read in Microsoft Office allows an unauthorize…7.8
• CVE-2026-63516Deserialization of untrusted data in Microsoft Office ShareP…6.5
• CVE-2026-63517Out-of-bounds read in Microsoft Office allows an unauthorize…5.5
• CVE-2026-63518Heap-based buffer overflow in Microsoft Office Word allows a…7.8
• CVE-2026-63519Heap-based buffer overflow in Microsoft Office allows an una…7.8
• CVE-2026-6352GitLab has remediated an issue in GitLab EE affecting all ve…2.7