CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-70324

CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...

EUVD-2026-56573

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-70321

CVE-2026-70321: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Affected software is Microsoft SharePoint; root cause is deserialization of untrusted data. Impact is high (CVE-2026-70321 CVSS 3.1: 8.8/10). No remediati...

CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-65665

CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...

EUVD-2026-56433

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

EUVD-2026-56431

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

EUVD-2026-56430

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-65663

CVE-2026-65663 affects Microsoft SharePoint Server and is caused by deserialization of untrusted data, enabling an authorized attacker to execute code remotely over a network. The NVD entry and CVE records describe a remote code execution vulnerability with high impact (C:H, I:H, A:H) and network...

CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65660

A code injection vulnerability exists in Microsoft SharePoint Server (on-premises versions 2016, 2019, and 2022) due to unescaped quote injection into Register directives . This flaw allows an authorized low-privilege user to bypass SafeControls validation and achieve remote code execution (RCE) ...

CVE-2026-65658

CVE-2026-65658 involves a deserialization vulnerability in Microsoft Office SharePoint that can allow an authorized attacker to execute arbitrary code over the network. The published description identifies deserialization of untrusted data as the root cause, with the CVSS 3.1 base score of 8.8 (H...