CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64897

CVE-2026-64897 describes an XSS vulnerability in Microsoft Office SharePoint Server due to improper neutralization of input during web page generation. An authorized attacker could spoof users over the network. Documents indicate the flaw and its impact as spoofing, with CVSSv3.1 base score 4.6 (...

CVE-2026-70355

CVE-2026-70355 affects Microsoft Office SharePoint/SharePoint Server; improper neutralization of input during web page generation (XSS) could allow an authorized attacker to elevate privileges over the network. The CVSSv3.1 base score is 7.3 (HIGH) with NETWORK attack vector, LOW attack complexit...

CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-65665

CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...

CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65663

CVE-2026-65663 affects Microsoft SharePoint Server and is caused by deserialization of untrusted data, enabling an authorized attacker to execute code remotely over a network. The NVD entry and CVE records describe a remote code execution vulnerability with high impact (C:H, I:H, A:H) and network...

CVE-2026-65660

CVE-2026-65660 is a code injection vulnerability in Microsoft Office SharePoint that allows an authorized attacker to perform spoofing over a network, per the NVD entry. Microsoft's own advisory characterizes the impact as remote code execution . The Microsoft CNA CVSS 3.1 score is 8.8 (High) , w...

CVE-2026-65658

CVE-2026-65658 involves a deserialization vulnerability in Microsoft Office SharePoint that can allow an authorized attacker to execute arbitrary code over the network. The published description identifies deserialization of untrusted data as the root cause, with the CVSS 3.1 base score of 8.8 (H...

CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-64922

CVE-2026-64922 affects Microsoft SharePoint Server. The vulnerability is improper neutralization of input during web page generation (XSS) that enables an authorized attacker to spoof over a network. Exploitation is network-based with low privileges and user interaction required; impact includes ...

CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63520

CVE-2026-63520 is an improper input validation vulnerability in Microsoft SharePoint Server that allows an unauthorized attacker to achieve remote code execution over a network with no privileges or user interaction required, though attack complexity is high. It affects SharePoint Server 2016 , 2...