47765 matches found
CVE-2026-62839
CVE-2026-62839 describes insufficient protection of credentials in Microsoft Office SharePoint, enabling an authorized attacker to perform network spoofing. The vulnerability is triggered by inadequate credential handling in SharePoint, which may allow an attacker with low privileges and network ...
CVE-2026-65767
Microsoft Teams for Android is affected by CVE-2026-65767 due to improper neutralization of input during web page generation (XSS). Attack requires network access with low privileges and no user interaction; an authorized attacker could spoof content. The CVSS v3.1 base score is 8.8 (HIGH). Affec...
CVE-2026-70306
Summary: CVE-2026-70306 affects Microsoft Office SharePoint. The vulnerability is an improper neutralization of input during web page generation (XSS) that could allow an unauthorized attacker to perform spoofing over a network. Impact: High confidentiality and integrity impact, no availability i...
CVE-2026-70306 Microsoft Office SharePoint Spoofing Vulnerability
...
CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability
...
CVE-2026-65777 Active Directory Security Feature Bypass Vulnerability
...
CVE-2026-64916
CVE-2026-64916 affects Microsoft Office SharePoint Server and relates to improper neutralization of input during web page generation (XSS), enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 4.6 (Medium) with Network access, Low attack complexity, Low privileges r...
CVE-2026-64916 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64900
CVE-2026-64900 affects Microsoft Office SharePoint and is described as an improper neutralization of input during web page generation (XSS) that enables an authorized attacker to perform spoofing over a network. Exploitation requires network access, low attack complexity, low privileges , and use...
CVE-2026-64902
CVE-2026-64902 affects Microsoft Office SharePoint. It arises from improper neutralization of input during web page generation, enabling spoofing by an authorized attacker over a network. CVSS 3.1: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N; base score 4.6 (Medium). Exploitation status and concrete reme...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability
...
EUVD-2026-56688
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-65660
CVE-2026-65660 is a code injection vulnerability in Microsoft Office SharePoint that allows an authorized attacker to perform spoofing over a network, per the NVD entry. Microsoft's own advisory characterizes the impact as remote code execution . The Microsoft CNA CVSS 3.1 score is 8.8 (High) , w...
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability
...