Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE

Microsoft SharePoint Server 2016, 2019, Subscription Edition = 2026.3.1 contains a remote code execution vulnerability in the WS-Federation passive sign-in endpoint /trust/default.aspx. The SharePoint authentication module SPFederationAuthenticationModuleV2 uses a deflate-only...

Microsoft SharePoint Server - Authentication Bypass

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. id: CVE-2025-49706 info: name: Microsoft SharePoint Server - Authentication Bypass author: daffainfo severity: medium description: | Improper authentication in Microsoft Offi...

CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-58639

CVE-2026-58639 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint. The NVD entries indicate an authorized attacker can leverage SSRF to spoof over a network with a base CVSS v3.1 score of 6.5 (Medium): attack vector NETWORK, user interaction NONE, privileges required LO...

CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62839

CVE-2026-62839 describes insufficient protection of credentials in Microsoft Office SharePoint, enabling an authorized attacker to perform network spoofing. The vulnerability is triggered by inadequate credential handling in SharePoint, which may allow an attacker with low privileges and network ...

CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-70326

CVE-2026-70326 describes a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint that enables an authorized attacker to elevate privileges over a network . Publicly documented details indicate the affected product is SharePoint Server, with the underlying impact being el...

CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66805 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66805 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66805

A CVE-2026-66805 entry exists with conflicting descriptions across sources. The connected Red Hat CVE details describe a flaw in the console component of a managed-cluster hub: an attacker who can write to container logs can inject malicious code into the hub console user’s browser session by vie...

CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-64921

CVE-2026-64921 describes a privilege-elevation vulnerability in Microsoft Office SharePoint due to a missing authentication check for a critical function. An authorized attacker could escalate privileges over the network (CVSS v3.1: 8.8, HIGH; Network, Privileges Required: Low; User Interaction: ...