9773 matches found
CVE-2026-54108
External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-50522
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
CVE-2026-58277
CVE-2026-58277 is a Microsoft SharePoint elevation-of-privilege vulnerability (Office SharePoint). The entry cites improper authorization that lets an authenticated attacker elevate privileges over the network. CVSS 3.1 base score 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and ...
EUVD-2026-44282
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-56157
Summary: CVE-2026-56157 is described as an improper access-control vulnerability in Microsoft Office SharePoint that could enable an authorized attacker to spoof over a network. The connected documents consistently identify SharePoint (Office suite) as affected and describe the impact as spoofing...
CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability
...
EUVD-2026-44233
Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-55135
CVE-2026-55135 concerns a cross-site scripting spoofing vulnerability in Microsoft Office SharePoint. The connected sources identify the affected product as Microsoft SharePoint Server (part of Office/SharePoint), and describe the root cause as improper neutralization of input during web page gen...
CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability
...
EUVD-2026-44223
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-44222
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-55052 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-55052 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-55052
CVE-2026-55052 concerns a privilege-elevation flaw in Microsoft SharePoint (Office SharePoint). The description across sources is a missing authorization vulnerability that could let an authorized attacker elevate privileges over a network. Affected components/versions are centered on Microsoft O...
CVE-2026-55040
CVE-2026-55040 describes weak authentication in Microsoft Office SharePoint that can allow an unauthenticated, network-based attacker to bypass a security feature and access or tamper data. The CVSS v3.1 vector indicates a network attack with low prerequisite access, no user interaction, and high...