← back | CVE Intelligence

CVE-2026-20963

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-20963.

Coverage Span: 2026-04-24
Reports: 2 related reports

Associated Reports & Timeline

CVE-2026-20963 Analysis

CVE-2026-20963: inconsistently normalized TagPrefix values in Register Directives let HTML-encoded whitespace slip past SharePoint SafeControls validation; fixed in the KB5002825 update.

Phân tích CVE-2026-20963

A diff-based analysis of SharePoint CVE-2026-20963 shows the KB5002825 patch hardened Register Directive parsing, which attackers could abuse to bypass SafeControls checks and reach RCE.