CVE-2026-57105

🗓️ 11 Aug 2026 17:03:27Reported by microsoftType

CVE-2026-57105: Spoofing flaw in Microsoft Office SharePoint enables content injection or XSS attacks. CVE-2026-57105 is a spoofing vulnerability in Microsoft Office SharePoint, allowing attackers to inject content or execute cross-site scripting (XSS) attacks. The flaw affects SharePoint's handling of user-supplied input, enabling malicious scripts to execute in victim browsers. Exploitation could lead to session hijacking, data theft, or privilege escalation within SharePoint environments. Microsoft recommends applying the latest security updates to mitigate this vulnerability.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-57105	11 Aug 202617:03	–	attackerkb
Circl	CVE-2026-57105	11 Aug 202619:01	–	circl
Cvelist	CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability	11 Aug 202617:03	–	cvelist
EUVD	EUVD-2026-56291	11 Aug 202617:03	–	euvd
Microsoft KB	Description of the security update for SharePoint Server Subscription Edition: August 11, 2026 (KB5002893)	11 Aug 202614:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: August 11, 2026 (KB5002894)	11 Aug 202614:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019 Language Pack: August 11, 2026 (KB5002896)	11 Aug 202614:00	–	mskb
Microsoft CVE	Microsoft Office SharePoint Spoofing Vulnerability	11 Aug 202614:00	–	mscve
NCSC	vulnerabilities present in Microsoft Office	11 Aug 202619:57	–	ncsc
NVD	CVE-2026-57105	11 Aug 202617:18	–	nvd

NVD

Vulners

CNA

Node

microsoft sharepoint_serverRange<16.0.19725.20522subscription

microsoft sharepoint_serverMatch2019

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.10417.20198",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.19725.20522",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57105

11 Aug 2026 23:57Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.4 - 8

SSVC

CWE-79