Reported by 1 outlet
Microsoft and Apple Ship Fresh Updates — Three CVSS 10.0, Four 9.9, macOS Screen Sharing Bypass
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 5.00 / 5.0 · CVSS + KEV signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Microsoft and Apple Ship Fresh Updates — Three CVSS 10.0, Four 9.9, macOS Screen Sharing Bypass
securityweek.com · 68d ago · August 7th, 2026
Microsoft's August 6 batch fixes a dozen-plus flaws across Active Directory, Azure, Entra, SharePoint, and Teams, led by three CVSS 10.0 network-exploitable elevation-of-privilege issues: CVE-2026-63508 (missing authentication in Planetary Computer Pro), CVE-2026-56162 (improper authentication in Azure SQL Database), and CVE-2026-65667 (missing authorization in Teams), plus 9.9s including CVE-2026-50515 (Azure Service Bus RCE) and CVE-2026-50481 (Active Directory EoP). Apple patched CVE-2026-65400 (CVSS 7.5), an authentication bypass letting network attackers log into Screen Sharing without credentials, in macOS Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9.