High Threat Security Alert (A26-07-30): Multiple Vulnerabilities in Microsoft Products

Description:

Microsoft has released security updates to address multiple vulnerabilities in several Microsoft products or components. The list of security updates can be found at:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56171
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58598
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58643
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59117
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62826

Reports indicate that the remote code execution vulnerability (CVE-2026-58644) is being exploited in the wild. System administrators are advised to take immediate action to patch affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Remote Desktop Web Client
• Windows 10 version 21H2, 22H2
• Windows 11 version 24H2, 25H2, 26H1
• Windows Admin Center
• Windows Terminal App

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, elevation of privilege, information disclosure or spoofing on an affected system.

Recommendation:

Patches for affected products are available from the Windows Update / Microsoft Update Catalog. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56171
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58598
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58643
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59117
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62826
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56171
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58598
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58643 (to CVE-2026-58644)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59117
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62826