3189 matches found
CVE-2026-70321
CVE-2026-70321: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Affected software is Microsoft SharePoint; root cause is deserialization of untrusted data. Impact is high (CVE-2026-70321 CVSS 3.1: 8.8/10). No remediati...
EUVD-2026-56433
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-65665
CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...
CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
EUVD-2026-56431
Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-65660
CVE-2026-65660 is a code injection vulnerability in Microsoft Office SharePoint that allows an authorized attacker to perform spoofing over a network, per the NVD entry. Microsoft's own advisory characterizes the impact as remote code execution . The Microsoft CNA CVSS 3.1 score is 8.8 (High) , w...
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
EUVD-2026-56296
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network...
CVE-2026-63512
CVE-2026-63512 affects Microsoft Office SharePoint. The issue is an incorrect authorization that could allow an authorized attacker to tamper over a network. The CVSS 3.1 vector indicates network access, low attack complexity, low privileges required, with a high integrity impact and no confident...
CVE-2026-63516
Deserialization of untrusted data in Microsoft Office SharePoint is the root cause of CVE-2026-63516, leading to spoofing over a network by an authorized attacker. Affected component: SharePoint Server (Microsoft Office SharePoint). CVE notes that exploitation is possible through network access w...
CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-57105
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...