CVE-2026-64901

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

• CWE-502

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64901Patch, Vendor Advisory

Published

Aug 11, 2026

Last Modified

Aug 12, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6489A security flaw has been discovered in QueryMine sms up to 7…6.3
• CVE-2026-64897Improper neutralization of input during web page generation …5.4
• CVE-2026-64898Heap-based buffer overflow in Microsoft Office allows an una…7.8
• CVE-2026-64899Out-of-bounds read in Microsoft Office allows an unauthorize…5.5
• CVE-2026-6490A weakness has been identified in QueryMine sms up to 7ab5a9…7.3
• CVE-2026-64900Improper neutralization of input during web page generation …5.4
• CVE-2026-64902Improper neutralization of input during web page generation …5.4
• CVE-2026-64903Integer overflow or wraparound in Microsoft Office allows an…7.8
• CVE-2026-64904Access of resource using incompatible type ('type confusion'…7.8
• CVE-2026-64905Buffer over-read in Microsoft Office Word allows an unauthor…7.8
• CVE-2026-64906Heap-based buffer overflow in Microsoft Office Access allows…7.8
• CVE-2026-64907Stack-based buffer overflow in Microsoft Office Word allows …7.8