ModerateExploitedOn-premSharePoint Server
Microsoft SharePoint Server Elevation of Privilege Vulnerability
⏰ Remediate by Jul 17, 2026 · passed 38d ago
Elevation of Privilege · Moderate · CVSS 5.3 · Exploited in the wild. Affects: SharePoint Server.
Upcoming Microsoft 365 deadlines (9)
Dated obligations across Microsoft 365: CISA KEV remediation dates, retirements / removals, and API deprecations — soonest first. Informational roadmap availability targets are excluded. Subscribe via the iCal feed below.
See also: 📅 Add to calendar (iCal) · Exploited CVEs · Retirements
CriticalExploitedOn-premSharePoint Server
Microsoft SharePoint Remote Code Execution Vulnerability
⏰ Remediate by Jul 19, 2026 · passed 36d ago
Remote Code Execution · Critical · CVSS 9.8 · Exploited in the wild. Affects: SharePoint Server.
CriticalExploitedOn-premSharePoint Server
Microsoft SharePoint Remote Code Execution Vulnerability
⏰ Remediate by Jul 25, 2026 · passed 30d ago
Remote Code Execution · Critical · CVSS 9.8 · Exploited in the wild. Affects: SharePoint Server.
UpcomingMicrosoft Entra IDMicrosoft Authenticator App
Improved restore experience for device-bound Authenticator app passkeys on iOS
⏰ Migrate before Aug 1, 2026 · passed 23d ago
What is changing? Starting August 2026, users will see an improved restore experience for device-bound Authenticator app passkeys for iOS users. No admin or user action is required.
CriticalExploitedOn-premSharePoint Server
Microsoft SharePoint Server Security Feature Bypass Vulnerability
⏰ Remediate by Aug 21, 2026 · passed 3d ago
Security Feature Bypass · Critical · CVSS 9.1 · Exploited in the wild. Affects: SharePoint Server.
In developmentOutlook
Outlook: Enhanced user interface updates for iPhone and iPad
⏰ Act before September CY2026 · ~1 mo away
People using Outlook for iOS on iPhone and iPad will see refreshed interface elements aligned with the latest Liquid Glass iOS visual experience, including modernized app chrome, navigation, and use of screen space. It will be enabled by default with no administrator action required.
In developmentMicrosoft Teams
Microsoft Teams: Mandatory pre-meeting consent
⏰ Act before September CY2026 · ~1 mo away
We are providing a new configuration experience in Teams Admin Center where tenant admins can enable and customize an explicit consent message before joining any meeting hosted in their organization.
In developmentMicrosoft Teams
Microsoft Teams: Town hall media optimization for VDI attendees
⏰ Act before September CY2026 · ~1 mo away
What’s new Teams now supports audio and video offloading for Town hall attendees in VDI environments that are using the new optimization. Media streams are offloaded directly to the user’s local device, improving performance and delivering a high definition viewing experience while reducing virtual desktop resource usage. Who it applies to • Windows endpoints only using the new VDI optimization • Supported VDI platforms: o Azure Virtual Desktop and Windows 365 o Citrix o Omnissa o Amazon WorkSpaces What stays the same All attendee interactivity features remain supported, including captions, DVR, reactions, streaming chat, and Q&A. Additional details First party and third party eCDNs are supported. When enabled, the attendee’s endpoint establishes a direct peer to peer connection using the local device network, avoiding virtual desktop double hop traffic. Action required No action is required if the new optimization for Microsoft Teams is already enabled.
In developmentMicrosoft Edge
Microsoft Edge: Vertical Tabs update
⏰ Act before December CY2026 · ~3 mo away
Microsoft Edge is updating its vertical tab implementation and architecture. Edge is reimplementing capabilities across pane, layout, controls, tab behavior, visual treatments, & embedder customizations. No admin action is required.