zero-day — news and analysis

NVD detail page for CVE-2026-56164 showing a 9.8 CRITICAL score

Microsoft called this SharePoint bug 'Moderate.' the NVD says it's a 9.8 — and hackers are already using it

Same vulnerability, two official severity scores that don't agree: Microsoft rates CVE-2026-56164 a 5.3, the National Vulnerability Database a 9.8. It's a zero-day being exploited right now. Here's who's right, and what to do.

Priya Nair · 2h ago · 7 min