CVE-2026-55021

CVE-2026-55021 affects Microsoft SharePoint Server (Office/SharePoint component). The issue is caused by improper neutralization of input during web page generation, enabling an authorized attacker to spoof over the network via a malicious link or page. The CVSSv3.1 score is 7.3 (High) with Netwo...

CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55019

CVE-2026-55019 describes an "Improper neutralization of input during web page generation" (XSS) in Microsoft Office SharePoint, enabling an authorized attacker to spoof content over the network. Multiple connected sources confirm: affected product is SharePoint Server (Microsoft Office/SharePoint...

CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55016

CVE-2026-55016 is a SharePoint-related issue affecting Microsoft Office SharePoint, described as improper neutralization of input during web page generation (XSS) that enables spoofing over a network by an authorized attacker. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) yields a bas...

CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

PT-2026-58569

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network...

CVE-2026-45454

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-47298

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-47636

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-48562 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-48560 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-48560 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-45484 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-45481 Microsoft SharePoint Server Spoofing Vulnerability

...