PT-2026-70745

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an unauthorized attacker to perform spoofing over a network...

PT-2026-70704

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...

PT-2026-70395

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70567

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description A relative path traversal issue allows an authorized attacker to disclose sensitive information over a network. Path traversal is a technique that allows an attacker to...

PT-2026-70397

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description A server-side request forgery SSRF issue allows an authorized attacker to perform spoofing over a network. SSRF is a flaw where a server is tricked into making requests to...

CVE-2026-62917: Improper Input Validation

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-62839: Insufficiently Protected Credentials

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-58639: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-70326: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70306: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-66808: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-66805: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-64921: Missing Authentication for Critical Function

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-64916: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-64901: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-64902: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-64900: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-64897: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-70355: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70324: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...