PULSEUnderground Intel

EN VIVO24señales / 24h

FEED

ransomaurora reclama a Duarte Nursery, Inc. · US · Agriculture and Food Productionransomn0n reclama a 51Ridge (Newark NJ hosting/IT) · US · Technologyransombooba project reclama a Research Foundation of The City University of New York · US · Educationransombooba project reclama a Chicago Vein Institute · US · Healthcareransombooba project reclama a Pearland Pediatrics · US · Healthcareransombooba project reclama a City of Mt. Angel, Oregon · US · Government & Defenseransombooba project reclama a City Hall - Everett, MA · US · Government & Defenseransommimori reclama a OpenText · CA · Technologyransommimori reclama a Aveva · GB · Manufacturingransombooba project reclama a COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA · US · Healthcareransomn0n reclama a Company #98 · ET · Not Foundransomn0n reclama a Company #97 · TN · Not Foundransomn0n reclama a Company #96 · TT · Not Foundransomn0n reclama a Company #95 · CH · Not Foundransomaurora reclama a Duarte Nursery, Inc. · US · Agriculture and Food Productionransomn0n reclama a 51Ridge (Newark NJ hosting/IT) · US · Technologyransombooba project reclama a Research Foundation of The City University of New York · US · Educationransombooba project reclama a Chicago Vein Institute · US · Healthcareransombooba project reclama a Pearland Pediatrics · US · Healthcareransombooba project reclama a City of Mt. Angel, Oregon · US · Government & Defenseransombooba project reclama a City Hall - Everett, MA · US · Government & Defenseransommimori reclama a OpenText · CA · Technologyransommimori reclama a Aveva · GB · Manufacturingransombooba project reclama a COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA · US · Healthcareransomn0n reclama a Company #98 · ET · Not Foundransomn0n reclama a Company #97 · TN · Not Foundransomn0n reclama a Company #96 · TT · Not Foundransomn0n reclama a Company #95 · CH · Not Found

← Todos los CVEs

CVE Watch16 oct 2026

CVE-2026-96044

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVSS

8.8

Alto

EPSS

0.7%

p53

KEV

—

Exploit Today

16

0-100

Publicado: 13 oct 2026 · Última mod.: 16 oct 2026 · CWE-1287 · CWE-269

EPSS · 30d

0.7%EPSS · 30 días0.7%

2026-10-142026-10-19

Descripción técnica

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96044

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1053129.9 CRÍ

———A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on all Strimzi CRDs (including KafkaUsers), patch on Kafkas/KafkaRebalances, and cluster-monitoring-view. The attacker's code reads the projected SA token and gains cross-tenant Strimzi control-plane read+write access.4h CVE-2026-869333.3 BAJ

——0A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.3h CVE-2026-869216.2 MED

——0A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.4h CVE-2026-288537.8 ALT

——0The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.4h CVE-2026-1054538.4 ALT

——0IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.4h CVE-2026-1100317.2 ALT

——5The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer, allowing them to escalate any account to administrator and take over the site.21h