CVE-2026-55020 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55020 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55021 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55019

CVE-2026-55019 describes an "Improper neutralization of input during web page generation" (XSS) in Microsoft Office SharePoint, enabling an authorized attacker to spoof content over the network. Multiple connected sources confirm: affected product is SharePoint Server (Microsoft Office/SharePoint...

CVE-2026-55016

CVE-2026-55016 is a SharePoint-related issue affecting Microsoft Office SharePoint, described as improper neutralization of input during web page generation (XSS) that enables spoofing over a network by an authorized attacker. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) yields a bas...

CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2026-50684

CVE-2026-50684 (AD FS spoofing) : The vulnerability is described as improper neutralization of input during web page generation (XSS) in Active Directory Federation Services, enabling an authorized attacker to perform spoofing over the network. The CVSS v3.1 base metrics indicate a Medium severit...

CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability

...

CVE-2026-58647

CVE-2026-58647 affects Microsoft Power BI Power BI Report Server. The issue is an improper neutralization of input during web page generation, enabling cross-site scripting. Attackers must be authorized, require user interaction, and can exploit over the network to perform spoofing with high impa...

CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability

...

CVE-2026-58595

CVE-2026-58595 concerns the Microsoft Bing App for iOS, where an improper restriction of rendered UI layers or frames enables an unauthorized attacker to spoof over a network. The vulnerability affects the Bing iOS app’s UI rendering stack (specific component not detailed in the provided document...

CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability

...

CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability

...

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-54108

CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...