9771 matches found
CVE-2026-64901
CVE-2026-64901 involves deserialization of untrusted data in Microsoft Office SharePoint, enabling an authorized attacker to execute code over the network. The vulnerability affects Microsoft SharePoint Server components as described in the CVE entries; the underlying issue is untrusted-deseriali...
CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
EUVD-2026-56703
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-64902
CVE-2026-64902 affects Microsoft Office SharePoint. It arises from improper neutralization of input during web page generation, enabling spoofing by an authorized attacker over a network. CVSS 3.1: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N; base score 4.6 (Medium). Exploitation status and concrete reme...
CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
EUVD-2026-56702
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-64900
CVE-2026-64900 affects Microsoft Office SharePoint and is described as an improper neutralization of input during web page generation (XSS) that enables an authorized attacker to perform spoofing over a network. Exploitation requires network access, low attack complexity, low privileges , and use...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64897
CVE-2026-64897 describes an XSS vulnerability in Microsoft Office SharePoint Server due to improper neutralization of input during web page generation. An authorized attacker could spoof users over the network. Documents indicate the flaw and its impact as spoofing, with CVSSv3.1 base score 4.6 (...
EUVD-2026-56700
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability
...
EUVD-2026-56602
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-70355
CVE-2026-70355 affects Microsoft Office SharePoint/SharePoint Server; improper neutralization of input during web page generation (XSS) could allow an authorized attacker to elevate privileges over the network. The CVSSv3.1 base score is 7.3 (HIGH) with NETWORK attack vector, LOW attack complexit...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...