CVE-2026-47638 Microsoft SharePoint Server Spoofing Vulnerability

🗓️ 09 Jun 2026 17:05:06Reported by microsoftType

CVE-2026-47638 is a spoofing vulnerability in Microsoft SharePoint Server.

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spear-phishing attacks.	16 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-47638	9 Jun 202616:04	–	circl
CNNVD	Microsoft Office Sharepoint Server 跨站脚本漏洞	9 Jun 202600:00	–	cnnvd
CVE	CVE-2026-47638	9 Jun 202617:05	–	cve
EUVD	EUVD-2026-35511	9 Jun 202618:30	–	euvd
Microsoft KB	Description of the security update for SharePoint Server Subscription Edition: June 9, 2026 (KB5002873)	9 Jun 202614:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: June 9, 2026 (KB5002874)	9 Jun 202614:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2016: June 9, 2026 (KB5002880)	9 Jun 202614:00	–	mskb
Microsoft CVE	Microsoft SharePoint Server Spoofing Vulnerability	9 Jun 202614:00	–	mscve
NCSC	vulnerabilities present in Microsoft Office	9 Jun 202618:04	–	ncsc

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Enterprise Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.5556.1005",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.10417.20153",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.19725.20384",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47638

01 Jul 2026 20:13Current

CVSS 3.14.6

EPSS0.00505

CWE-79