8624 matches found
CVE-2026-26106
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-26106
CVE-2026-26106 is a Microsoft SharePoint Server remote code execution vulnerability caused by improper input validation. The CVE affects SharePoint Server variants (Office/SharePoint components) and enables an authenticated (network) attacker with low privileges to execute arbitrary code, potenti...
CVE-2026-26114
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-26114
CVE-2026-26114 concerns a deserialization vulnerability in Microsoft SharePoint Server that allows an authorized attacker to execute code over the network. The issue is described as deserialization of untrusted data in SharePoint/Office components, enabling remote code execution with high impact ...
CVE-2026-26114 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-26114 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-26105 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-26105
CVE-2026-26105 : A cross-site scripting vulnerability in Microsoft SharePoint (Office SharePoint) arises from improper input neutralization during web page generation, enabling an attacker to spoof over a network. Connected sources corroborate spoofing/impersonation risk for SharePoint Server. Im...
CVE-2026-26105
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-26105 Microsoft SharePoint Server Spoofing Vulnerability
...
Description of the security update for SharePoint Server 2019 Language Pack: March 10, 2026 (KB5002847)
None None...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Description of the security update for SharePoint Server Subscription Edition: March 10, 2026 (KB5002843)
None None...
Description of the security update for SharePoint Server 2016: March 10, 2026 (KB5002850)
None None...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
Description of the security update for SharePoint Server 2016 Language Pack: March 10, 2026 (KB5002851)
None None...
Description of the security update for SharePoint Server 2019: March 10, 2026 (KB5002845)
None None...
The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction
You can't control when the next critical vulnerability drops. You can control how much of your environment is exposed when it does. The problem is that most teams have more internet-facing exposure than they realise. Intruder's Head of Security digs into why this happens and how teams can manage ...
PT-2026-24324
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server affected versions not specified Description An issue exists in the deserialization mechanism of Microsoft Office SharePoint. Deserialization is the process of converting a...