CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-58644

CVE-2026-58644 – Microsoft SharePoint Deserialization of Untrusted Data (Server) involves a deserialization flaw in SharePoint Server that allows an unauthenticated attacker to execute arbitrary code over a network. The vulnerability affects Microsoft Office SharePoint/SharePoint Server component...

CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-50522

CVE-2026-50522 is a deserialization flaw in Microsoft Office SharePoint that enables remote code execution over a network. Affected products include on‑premises SharePoint Server variants (Server 2016/2019, Subscription Edition, Enterprise Server). The root cause is deserialization of untrusted d...

CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-50522

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2026-56164

CVE-2026-56164 is a Microsoft SharePoint Server elevation-of-privilege vulnerability described as missing authentication for a critical function, enabling a remote attacker to elevate privileges over a network. Public advisories indicate widespread Office-related vulnerabilities, with SharePoint ...

CVE-2026-56164

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-54108

CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...

CVE-2026-54108

External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

...

Description of the security update for SharePoint Server 2016: June 9, 2026 (KB5002880)

None None...

Description of the security update for SharePoint Server 2019: June 9, 2026 (KB5002874)

None None...

Description of the security update for SharePoint Server Subscription Edition: June 9, 2026 (KB5002873)

None None...

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...