4134 matches found
Description of the security update for SharePoint Server 2019: February 10, 2026 (KB5002834)
None None...
Description of the security update for SharePoint Server Subscription Edition: February 10, 2026 (KB5002833)
None None...
Description of the security update for SharePoint Server 2016: February 10, 2026 (KB5002841)
None None...
Description of the security update for SharePoint Server 2016 Language Pack: February 10, 2026 (KB5002840)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: February 10, 2026 (KB5002836)
None None...
Security Updates for Microsoft SharePoint Server Subscription Edition (February 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user...
Security Updates for Microsoft SharePoint Server 2016 (February 2026)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2026-21511,...
Security Updates for Microsoft SharePoint Server 2019 (February 2026)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Microsoft SharePoint Server XSS
The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server programs is related to insufficient data validation. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Microsoft SharePoint Server Deserialization RCE
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Click-to-Run Package Services Privilege Escalation
The vulnerability of the Click-to-Run package services for Microsoft Office and Microsoft SharePoint Server is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileges by sending specially crafted malicious files...
Microsoft SharePoint Server SQL Injection
The vulnerability of the Microsoft SharePoint Server software relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SharePoint Server Code Execution
The vulnerability of the Microsoft SharePoint Server software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft SharePoint Server Information Disclosure
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient testing of server-side requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
CVE-2026-20947
CVE-2026-20947 is a Microsoft SharePoint/Office SharePoint Remote Code Execution vulnerability caused by improper neutralization of SQL elements in SharePoint. An attacker can trigger code execution over the network with low privileges and no user interaction on affected SharePoint Server deploym...
CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20959
CVE-2026-20959 is a cross-site scripting vulnerability in Microsoft Office SharePoint (Server/Subscription Edition) caused by improper neutralization of input during web page generation. An authorized attacker could spoof a user over the network. Affected products include SharePoint Server (2016/...
CVE-2026-20959 Microsoft SharePoint Server Spoofing Vulnerability
...