UpHeron
All posts

Critical vulnerabilities

2 critical vulnerabilities in Microsoft SharePoint Server Subscription Edition and .NET

2 vulnerabilities rated critical (CVSS 9.0 or higher) found on 10 November 2026: Privilege escalation in servers and applications.

  • 2 critical

Privilege escalation in Microsoft SharePoint Server Subscription Edition · Servers and applications

CVE-2026-80095

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Severity
Critical 9.0
Published
10 Nov 2026
Fixed in
16.0.20326.20278
SoftwareAffected versions
Microsoft SharePoint Server Subscription EditionServers and applications
  • From 16.0.0 before 16.0.20326.20278
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-80095
Everything about CVE-2026-80095

Privilege escalation in .NET · Servers and applications

CVE-2026-114146

ASP.NET Core Elevation of Privilege Vulnerability

Severity
Critical 9.0
Published
10 Nov 2026
Fixed in
9.0.23, 10.0.15, 11.0.0
SoftwareAffected versions
.NETServers and applications
  • From 11.0.0-preview.1 before 11.0.0
  • From 10.0.0 before 10.0.15
  • From 9.0.0 before 9.0.23
  • From 8.0.0 before 8.0.34
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-114146
Everything about CVE-2026-114146

From NVD, the CVE Program, OSV.dev with the GitHub Advisory Database, WPVulnerability, WordPress's security advisories and CISA's Known Exploited Vulnerabilities catalog, as they stood when this was written. Each vulnerability's own page has its latest rating and fix. This product uses the NVD API but is not endorsed or certified by the NVD.