Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

Microsoft released updates addressing 169 vulnerabilities — including an actively exploited SharePoint spoofing zero-day (CVE-2026-32201), a publicly known Defender privilege-escalation bug (CVE-2026-33825), and a critical IKEv2 remote code execution flaw (CVE-2026-33824, CVSS 9.8). CISA has added the SharePoint flaw to its Known Exploited Vulnerabilities catalog and federal agencies are required to remediate, while experts warn internet-facing IKEv2 and VPN endpoints are particularly at risk.