CVE-2026-69804

A time-of-check time-of-use (TOCTOU) race condition in Microsoft Office SharePoint allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 7.5 (HIGH) with high impact to confidentiality, integrity, and availability...

EUVD-2026-73245

Time-of-check time-of-use toctou race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69683

CVE-2026-69683 is a server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint that allows an authorized attacker (low privileges) to disclose information over a network. The impact is classified as high confidentiality with no integrity or availability impact. NVD assigns a ...

EUVD-2026-73159

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69690

Microsoft Office SharePoint is affected by an improper neutralization of input during web page generation (cross-site scripting ), allowing an authorized attacker to perform spoofing over a network. The vulnerability requires low privileges and user interaction , with impacts limited to low confi...

EUVD-2026-73157

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-69724

CVE-2026-69724 is a missing authorization vulnerability in Microsoft Office SharePoint that allows an authorized attacker to achieve remote code execution over a network. The Microsoft CNA rates it CVSS 3.1 Base 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attac...

EUVD-2026-73155

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69716

Microsoft Office SharePoint is affected by a SQL injection vulnerability (improper neutralization of special elements in an SQL command) that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with network attack vector, low complexity, lo...

EUVD-2026-73152

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft Office SharePoint Information Disclosure Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Time-of-check time-of-use toctou race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft Office SharePoint Information Disclosure Vulnerability

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...