⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-63520: SharePoint Code Execution Vulnerability

August 11, 2026

CVE-2026-63520 is the code execution component of a SharePoint exploit chain, fixed in August 2026. Chaining with CVE-2026-55040 enables unauthenticated RCE.

Discovered from: Microsoft August 2026 Patch Tuesday: 398 Flaws Fixed, Windows Driver Zero-Day Under Active Attack