4134 matches found
CVE-2026-20945
CVE-2026-20945 (SharePoint) is an XSS-style vulnerability in Microsoft Office SharePoint where improper input neutralization during web page generation could allow an authorized attacker to spoof another user. Connected documents confirm the issue impacts SharePoint components and is being addres...
CVE-2026-20945 Microsoft SharePoint Server Spoofing Vulnerability
...
Description of the security update for SharePoint Server 2019: April 14, 2026 (KB5002854)
None None...
Description of the security update for SharePoint Server 2016 Language Pack: April 14, 2026 (KB5002862)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: April 14, 2026 (KB5002856)
None None...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Microsoft Office SharePoint Server input validation error vulnerability
Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...
KLA90985 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure...
Microsoft SharePoint Server Improper Input Validation Vulnerability
Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network...
Microsoft Office SharePoint Server Cross-site Scripting Vulnerability
Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...
Security Updates for Microsoft SharePoint Server 2019 (April 2026)
The Microsoft SharePoint 2019 Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Spoofing vulnerabilities CVE-2026-20945, CVE-2026-32201 Note that Nessus has not tested for these issues but has instead relied only on the...
Security Updates for Microsoft SharePoint Server 2016 (April 2026)
The Microsoft SharePoint 2016 Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Spoofing vulnerabilities CVE-2026-20945, CVE-2026-32201 Note that Nessus has not tested for these issues but has instead relied only on the...
Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2026-16163)
Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...
Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2026-16162)
Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server Subscription Edition, SharePoint Server, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Microsoft SharePoint Server Deserialization RCE
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft Office SharePoint Server Pointer Dereferencing Code Execution
The vulnerabilities of Microsoft Office packages, 365 Apps for Enterprise, Excel, SharePoint Server, and SharePoint Enterprise Server are related to unreliable pointer dereferencing. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...
CVE-2026-26106
CVE-2026-26106 is a Microsoft SharePoint Server remote code execution vulnerability caused by improper input validation. The CVE affects SharePoint Server variants (Office/SharePoint components) and enables an authenticated (network) attacker with low privileges to execute arbitrary code, potenti...