8624 matches found
CVE-2026-55019
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-58644
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
CVE-2026-56164
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-54108
External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-50522
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
CVE-2026-58277
CVE-2026-58277 is a Microsoft SharePoint elevation-of-privilege vulnerability (Office SharePoint). The entry cites improper authorization that lets an authenticated attacker elevate privileges over the network. CVSS 3.1 base score 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and ...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-56157
Summary: CVE-2026-56157 is described as an improper access-control vulnerability in Microsoft Office SharePoint that could enable an authorized attacker to spoof over a network. The connected documents consistently identify SharePoint (Office suite) as affected and describe the impact as spoofing...
CVE-2026-55135
CVE-2026-55135 concerns a cross-site scripting spoofing vulnerability in Microsoft Office SharePoint. The connected sources identify the affected product as Microsoft SharePoint Server (part of Office/SharePoint), and describe the root cause as improper neutralization of input during web page gen...
CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-55052 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-55052 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-55052
CVE-2026-55052 concerns a privilege-elevation flaw in Microsoft SharePoint (Office SharePoint). The description across sources is a missing authorization vulnerability that could let an authorized attacker elevate privileges over a network. Affected components/versions are centered on Microsoft O...
EUVD-2026-44211
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-55040
CVE-2026-55040 is a SharePoint Server vulnerability described as a security feature bypass caused by weak authentication. The affected products mentioned in the connected documents are SharePoint Server Subscription Edition, as well as SharePoint Server 2019 and 2016. Patch guidance is present in...