1508 matches found
CVE-2026-65665
CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...
CVE-2026-65660
A code injection vulnerability exists in Microsoft SharePoint Server (on-premises versions 2016, 2019, and 2022) due to unescaped quote injection into Register directives . This flaw allows an authorized low-privilege user to bypass SafeControls validation and achieve remote code execution (RCE) ...
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-63512
CVE-2026-63512 affects Microsoft Office SharePoint. The issue is an incorrect authorization that could allow an authorized attacker to tamper over a network. The CVSS 3.1 vector indicates network access, low attack complexity, low privileges required, with a high integrity impact and no confident...
CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Microsoft SharePoint Server Spoofing Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
CVE-2026-62826
CVE-2026-62826 affects Microsoft SharePoint Server where improper neutralization of input during web page generation enables an authorized attacker to spoof over a network. The NVD entry (CVSS 3.1: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N, base score 4.6) confirms cross-site scripting vulnerability wi...
Microsoft Office SharePoint Server Cross-site Scripting Vulnerability (CNVD-2026-29411)
Microsoft Office SharePoint Server is a web-based content management and collaboration tool designed for enterprise customers by Microsoft Corporation. The initial version of this software existed as an Office component and still relies heavily on Office for providing features such as enterprise...
CVE-2026-55135 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-55051 Microsoft SharePoint Server Information Disclosure Vulnerability
...
CVE-2026-55034
CVE-2026-55034 affects Microsoft Office SharePoint (SharePoint Server) and is triggered by improper neutralization of input during web page generation, enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 7.3 (HIGH): network attack vector, low attack complexity, pri...