8849 matches found
CVE-2026-20958 Microsoft SharePoint Information Disclosure Vulnerability
...
CVE-2026-20958
CVE-2026-20958 is a Microsoft SharePoint SSRF information-disclosure vulnerability. Affected product: Microsoft Office SharePoint (on-premises SharePoint Server/Subscription Edition). Description in sources: SSRF in SharePoint could permit an authorized attacker to disclose information over a net...
CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20947
CVE-2026-20947 is a Microsoft SharePoint/Office SharePoint Remote Code Execution vulnerability caused by improper neutralization of SQL elements in SharePoint. An attacker can trigger code execution over the network with low privileges and no user interaction on affected SharePoint Server deploym...
CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-20959
CVE-2026-20959 is a cross-site scripting vulnerability in Microsoft Office SharePoint (Server/Subscription Edition) caused by improper neutralization of input during web page generation. An authorized attacker could spoof a user over the network. Affected products include SharePoint Server (2016/...
EUVD-2026-2101
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-2114
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-20959 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-20959 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-20963
CVE-2026-20963 is a Microsoft SharePoint vulnerability described as deserialization of untrusted data (CWE-502) that enables a network-based code execution attack. The current description states an unauthenticated attacker can execute code over the network. Vendor discussions note a CVSSv3.1 vect...
CVE-2026-20951 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20951 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20951
CVE-2026-20951 is a Microsoft SharePoint Server Remote Code Execution vulnerability caused by improper input validation in SharePoint. The issue allows an unauthenticated or authenticated attacker to execute code locally on affected SharePoint Server deployments. Documented affected products incl...
Description of the security update for SharePoint Server 2016 Language Pack: January 13, 2026 (KB5002827)
None None...
Description of the security update for SharePoint Server Subscription Edition: January 13, 2026 (KB5002822)
None None...
