CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55019

CVE-2026-55019 describes an "Improper neutralization of input during web page generation" (XSS) in Microsoft Office SharePoint, enabling an authorized attacker to spoof content over the network. Multiple connected sources confirm: affected product is SharePoint Server (Microsoft Office/SharePoint...

CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55016

CVE-2026-55016 is a SharePoint-related issue affecting Microsoft Office SharePoint, described as improper neutralization of input during web page generation (XSS) that enables spoofing over a network by an authorized attacker. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) yields a bas...

CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-58644

CVE-2026-58644 – Microsoft SharePoint Deserialization of Untrusted Data (Server) involves a deserialization flaw in SharePoint Server that allows an unauthenticated attacker to execute arbitrary code over a network. The vulnerability affects Microsoft Office SharePoint/SharePoint Server component...

CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-50522

CVE-2026-50522 describes a remote code execution in Microsoft SharePoint due to deserialization of untrusted data. Affected: Microsoft Office SharePoint. Root cause: deserialization flaw when processing untrusted input. Impact: attacker can execute code remotely over the network with no privilege...

CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-56164

CVE-2026-56164 is a Microsoft SharePoint Server elevation-of-privilege vulnerability described as missing authentication for a critical function, enabling a remote attacker to elevate privileges over a network. Public advisories indicate widespread Office-related vulnerabilities, with SharePoint ...

CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-54108

CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

...

Description of the security update for SharePoint Server Subscription Edition: June 9, 2026 (KB5002873)

None None...

Description of the security update for SharePoint Server 2016: June 9, 2026 (KB5002880)

None None...

Description of the security update for SharePoint Server 2019: June 9, 2026 (KB5002874)

None None...