146142 matches found
CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability
...
CVE-2026-63516
Deserialization of untrusted data in Microsoft Office SharePoint is the root cause of CVE-2026-63516, leading to spoofing over a network by an authorized attacker. Affected component: SharePoint Server (Microsoft Office SharePoint). CVE notes that exploitation is possible through network access w...
CVE-2026-63512
CVE-2026-63512 affects Microsoft Office SharePoint. The issue is an incorrect authorization that could allow an authorized attacker to tamper over a network. The CVSS 3.1 vector indicates network access, low attack complexity, low privileges required, with a high integrity impact and no confident...
CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability
...
CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability
...
CVE-2026-63514
Summary: CVE-2026-63514 involves deserialization of untrusted data in Microsoft Office SharePoint, enabling an authorized attacker to execute code remotely over a network. Affected component: SharePoint Server (deserialization path in untrusted data handling). Impact: Remote code execution with H...
CVE-2026-62827
CVE-2026-62827 is a Microsoft SharePoint vulnerability describing improper authentication that allows an authorized attacker to elevate privileges over a network. Documents indicate the affected product is Microsoft Office SharePoint/SharePoint Server. The issue is a privilege-escalation flaw wit...
CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
EUVD-2026-56293
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-57105
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-56292
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability
...
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-57105
CVE-2026-57105 is a cross-site scripting vulnerability in Microsoft Office SharePoint caused by improper neutralization of input during web page generation. An authorized attacker could perform network spoofing. The CVSSv3.1 base score is 8.0 ( HIGH ) with Network attack vector, low attack comple...
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
...
EUVD-2026-56290
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...
CVE-2026-65768
CVE-2026-65768 is a Microsoft Teams for Android path traversal leading to remote code execution over a network. The root cause is an improper limitation of a pathname to a restricted directory, enabling an unauthenticated, network-based attacker to run code. Public CVSS data assigns a high/critic...