CVE-2026-63520

Vendor

Ivanti, Microsoft, Google

Product

Chrome, SharePoint, Microsoft 365 / Office

CVSS

7.0

EPSS

0.039 (p90)

Exposure class

Browser, Collaboration

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 71
   Ivanti advisory Ivanti 8 Sep 2026

   September 2026 Patch Tuesday

   What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix…

   Exploited CVSS 7.0 Fix available CVE-2026-68820CVE-2026-33824CVE-2026-55040+7 more Ivanti Microsoft
2. 19
   Advisory MSRC 11 Aug 2026

   CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

   Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

   CVE-2026-63520 Microsoft