8853 matches found
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Description of the security update for SharePoint Server 2016 Language Pack: December 9, 2025 (KB5002804)
None None...
Description of the security update for SharePoint Server 2019: December 9, 2025 (KB5002816)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: December 9, 2025 (KB5002802)
None None...
Microsoft SharePoint 跨站脚本漏洞
Microsoft SharePoint is a set of enterprise business collaboration platforms from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site...
Microsoft Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Security Updates for Microsoft SharePoint Server 2016 (December 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft SharePoint Server Subscription Edition (December 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another...
Microsoft Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word. An attacker could exploit this vulnerability to execute arbitrary code on a system...
Microsoft Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
PT-2025-50202
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists in Microsoft Office SharePoint related to improper neutralization of input during web page generation, leading to a cross-site scripting condition. This...
KLA90810 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Word can be...
Security Updates for Microsoft SharePoint Server 2019 (December 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
📄 Microsoft SharePoint Server ToolPane Authentication Bypass / Unsafe Deserialization
Proof of concept exploit for Microsoft SharePoint server that chains authentication bypass with unsafe deserialization to achieve complete system compromise without authentication...
📄 Microsoft Sharepoint Authentication Bypass
This is a proof of concept exploit for a Microsoft Sharepoint authentication bypass vulnerability discovered in 2023. ============================================================================================================================================= | Title : SharePoint Authentication...
CVE-2025-59245
Microsoft SharePoint Online Elevation of Privilege Vulnerability...
EUVD-2025-198371
Microsoft SharePoint Online Elevation of Privilege Vulnerability...
SharePoint or OneDrive Backup fails with 'Cannot complete this action'
This article has been updated to document the July 20, 2026, occurrence of this issue. Information regarding the February 2026 occurrence can be found in the More Information section at the very bottom of this article. Challenge A backup attempt for SharePoint Online and OneDrive objects may fail...
CVE-2025-59245
Microsoft SharePoint Online Elevation of Privilege Vulnerability...
CVE-2025-59245
CVE-2025-59245 is a Microsoft SharePoint Online elevation-of-privilege vulnerability. Connected sources describe the flaw as a code/ deserialization issue in SharePoint Online that could allow an attacker with network access and no user interaction to achieve high-impact permissions escalation (C...