CVE-2026-105013

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. The impact of this vulnerability is rated as High with a CVSS score of 7.40 . Microsoft has released updates to address this issue, an...

CVE-2026-96044

A Privilege Escalation vulnerability exists in Microsoft Office SharePoint . This issue allows an authorized attacker to elevate their privileges over a network. The vulnerability has a High base severity with a CVSS score of 8.8 . Microsoft has released updates to address this issue; users are r...

CVE-2026-88166

Microsoft Office SharePoint is affected by CVE-2026-88166 , which involves an integer overflow or wraparound vulnerability. An authorized attacker can exploit this flaw to achieve arbitrary code execution over a network. Microsoft has released security updates to address this vulnerability; users...

CVE-2026-88206

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , which allows an authorized attacker to elevate privileges over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 7.5 (High) . Microsoft has released official updates to address this is...

CVE-2026-88200

A Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This vulnerability is characterized by a HIGH base severity score of 8.8 (CVSS v3.1), with impacts on confidentiality, integrity, and availability. Microsoft has ...

CVE-2026-70246

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network due to incorrect authorization . The impact is rated as High with a CVSS score of 8.8 . Microsoft has released official fixes to address this issue; users are recommended to install t...

CVE-2026-88163

An integer overflow or wraparound vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve remote code execution over a network. While the NCSC advisory lists this CVE under SharePoint, it notes the impact as "Not a Vulnerability" (translated from the source text), co...

CVE-2026-70217

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network due to improper access control (CWE-284). The impact is classified as access to sensitive data with a CVSSv3.1 base score of 4.9 . Microsoft has released updates to address this vul...

CVE-2026-85932

A path traversal vulnerability exists in Microsoft Office SharePoint due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to disclose sensitive information over a network. Microsoft has released security updates to address this issue, and ...

CVE-2026-70202

A Server-Side Request Forgery (SSRF) vulnerability exists in Microsoft Office SharePoint . This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been addressed by Microsoft , and users are encouraged to install the latest updates provided in the offic...

CVE-2026-97783

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. An unauthorized attacker can leverage this flaw to perform spoofing over a network. Microsoft has released updates to address this issue, and us...

CVE-2026-97782

A vulnerability exists in Microsoft Office SharePoint where an observable discrepancy allows an authorized attacker to perform tampering over a network . The impact of this vulnerability includes high levels of confidentiality and integrity impact, with a CVSS v3.1 score of 6.8 . Microsoft has re...

CVE-2026-88208

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released security updates to address this issue, and u...

CVE-2026-88198

A missing authorization vulnerability in Microsoft Office SharePoint (CVE-2026-88198) allows an authorized attacker to elevate privileges over a network. The impact is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released official updates to address this issue; users are recommended ...

CVE-2026-88209

A Cross-Site Scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to improper neutralization of input during web page generation. An authorized attacker can exploit this flaw over a network to perform spoofing . Microsoft has released security updates to address this issue; use...

CVE-2026-88204

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released updates to address this vulnerability; users ...

CVE-2026-70298

A path traversal vulnerability in Microsoft Office SharePoint (CVE-2026-70298) allows an authorized attacker to disclose sensitive information over a network due to an improper limitation of a pathname to a restricted directory. Microsoft has released updates to address this issue; users are enco...

CVE-2026-88155

A heap-based buffer overflow exists in Microsoft Office SharePoint , which allows an authorized attacker to achieve arbitrary code execution over a network. The vulnerability has a CVSS v3.1 base score of 8.80 (High). Microsoft has released security updates to address this vulnerability; users ar...

CVE-2026-85900

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. This flaw is categorized as CWE-502 and has a CVSS 3.1 score of 8.80 (High). Microsoft has released official updates to address this v...

CVE-2026-70251

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , as detailed in CVE-2026-70251 . This flaw allows an authorized attacker to achieve privilege escalation over a network. Microsoft has released official updates to address this issue; users are encouraged to...