4134 matches found
CVE-2026-64916
CVE-2026-64916 affects Microsoft Office SharePoint Server and relates to improper neutralization of input during web page generation (XSS), enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 4.6 (Medium) with Network access, Low attack complexity, Low privileges r...
CVE-2026-64916 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-64901
CVE-2026-64901 involves deserialization of untrusted data in Microsoft Office SharePoint, enabling an authorized attacker to execute code over the network. The vulnerability affects Microsoft SharePoint Server components as described in the CVE entries; the underlying issue is untrusted-deseriali...
CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64902
CVE-2026-64902 affects Microsoft Office SharePoint. It arises from improper neutralization of input during web page generation, enabling spoofing by an authorized attacker over a network. CVSS 3.1: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N; base score 4.6 (Medium). Exploitation status and concrete reme...
CVE-2026-64900
CVE-2026-64900 affects Microsoft Office SharePoint and is described as an improper neutralization of input during web page generation (XSS) that enables an authorized attacker to perform spoofing over a network. Exploitation requires network access, low attack complexity, low privileges , and use...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64897
CVE-2026-64897 describes an XSS vulnerability in Microsoft Office SharePoint Server due to improper neutralization of input during web page generation. An authorized attacker could spoof users over the network. Documents indicate the flaw and its impact as spoofing, with CVSSv3.1 base score 4.6 (...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-70355
CVE-2026-70355 affects Microsoft Office SharePoint/SharePoint Server; improper neutralization of input during web page generation (XSS) could allow an authorized attacker to elevate privileges over the network. The CVSSv3.1 base score is 7.3 (HIGH) with NETWORK attack vector, LOW attack complexit...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-65665
CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...
CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-65663
CVE-2026-65663 affects Microsoft SharePoint Server and is caused by deserialization of untrusted data, enabling an authorized attacker to execute code remotely over a network. The NVD entry and CVE records describe a remote code execution vulnerability with high impact (C:H, I:H, A:H) and network...
CVE-2026-65660
A code injection vulnerability exists in Microsoft SharePoint Server (on-premises versions 2016, 2019, and 2022) due to unescaped quote injection into Register directives . This flaw allows an authorized low-privilege user to bypass SafeControls validation and achieve remote code execution (RCE) ...