9026 matches found
EUVD-2026-56700
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability
...
EUVD-2026-56602
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-70355
CVE-2026-70355 affects Microsoft Office SharePoint/SharePoint Server; improper neutralization of input during web page generation (XSS) could allow an authorized attacker to elevate privileges over the network. The CVSSv3.1 base score is 7.3 (HIGH) with NETWORK attack vector, LOW attack complexit...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability
...
EUVD-2026-56582
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-70324
CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...
CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability
...
EUVD-2026-56573
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-70321
CVE-2026-70321: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Affected software is Microsoft SharePoint; root cause is deserialization of untrusted data. Impact is high (CVE-2026-70321 CVSS 3.1: 8.8/10). No remediati...
EUVD-2026-56433
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-65665
CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...
CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability
...