Code Injection

Everything Patch Herald has reported about Code Injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

Microsoft patches CVE-2026-102863: High-severity SharePoint code injection fixes privilege escalation risk

A high-severity code injection vulnerability in older SharePoint Server versions is now patched, allowing authorized attackers to elevate privileges.

Oct 15, 2026

Low-privilege attackers can run code on vulnerable ColdFusion servers without user interaction, per National Vulnerability Database records.

Oct 14, 2026