CVE-2026-55030

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-55019

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-55020

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-55016

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-55021

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-58644

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2026-54108

External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-50522

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-58277

CVE-2026-58277 is a Microsoft SharePoint elevation-of-privilege vulnerability (Office SharePoint). The entry cites improper authorization that lets an authenticated attacker elevate privileges over the network. CVSS 3.1 base score 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and ...

CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-56157

Summary: CVE-2026-56157 is described as an improper access-control vulnerability in Microsoft Office SharePoint that could enable an authorized attacker to spoof over a network. The connected documents consistently identify SharePoint (Office suite) as affected and describe the impact as spoofing...

CVE-2026-56157 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55135

CVE-2026-55135 concerns a cross-site scripting spoofing vulnerability in Microsoft Office SharePoint. The connected sources identify the affected product as Microsoft SharePoint Server (part of Office/SharePoint), and describe the root cause as improper neutralization of input during web page gen...

CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55052 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-55052

CVE-2026-55052 concerns a privilege-elevation flaw in Microsoft SharePoint (Office SharePoint). The description across sources is a missing authorization vulnerability that could let an authorized attacker elevate privileges over a network. Affected components/versions are centered on Microsoft O...

CVE-2026-55052 Microsoft SharePoint Elevation of Privilege Vulnerability

...