9026 matches found
CVE-2026-69904
A server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. The flaw requires user interaction and low privileges (CVSS 3.1: 3.5 – LOW ). CISA's SSVC assessment indicates no known exploitation , the vulner...
EUVD-2026-73724
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
EUVD-2026-73715
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-69636
CVE-2026-69636 is an SQL injection vulnerability in Microsoft Office SharePoint , caused by improper neutralization of special elements used in SQL commands. An authorized attacker with low privileges can exploit it over a network to disclose information , with high confidentiality impact but no ...
CVE-2026-69615
CVE-2026-69615 is an improper neutralization of input during web page generation (cross-site scripting) vulnerability in Microsoft Office SharePoint . An authorized attacker with high privileges and required user interaction can perform spoofing over a network . NVD rates it 4.8 (MEDIUM) ; Micros...
EUVD-2026-73712
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69464
Microsoft Office SharePoint contains an elevation of privilege vulnerability characterized as execution with unnecessary privileges. An authorized attacker with low privileges can exploit this over a network to escalate their access, with high impact on confidentiality, integrity, and availabilit...
EUVD-2026-73713
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-69417
CVE-2026-69417 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker with low privileges can perform spoofing over a network , requiring user interaction. The CVSS 3.1 score is 7...
EUVD-2026-73696
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-73695
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-69409
Microsoft Office SharePoint is affected by an information disclosure vulnerability caused by execution with unnecessary privileges , allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) with high confidentiality impact but no integrity or avai...
CVE-2026-69402
CVE-2026-69402 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker (low privileges required) can exploit it over the network with low complexity and user interaction to perform...
EUVD-2026-73694
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-73289
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-69282
This vulnerability in Microsoft Office SharePoint stems from improper access control , allowing an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity but requi...
EUVD-2026-73288
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-69273
CVE-2026-69273 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with a network attack vector, low complexity, and low required privileges, resulting in high impact ...
CVE-2026-69268
CVE-2026-69268 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The assigned CVSS 3.1 score is 8.8 (HIGH) , with a vector of network attack, low complexity, and low privileges required, leading to high im...