Two critical zero-day vulnerabilities in SharePoint are actively exploited by attackers in real-world attacks.