CVE-2026-70326

CVE-2026-70326 describes a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint that enables an authorized attacker to elevate privileges over a network . Publicly documented details indicate the affected product is SharePoint Server, with the underlying impact being el...

EUVD-2026-56766

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-70306

Summary: CVE-2026-70306 affects Microsoft Office SharePoint. The vulnerability is an improper neutralization of input during web page generation (XSS) that could allow an unauthorized attacker to perform spoofing over a network. Impact: High confidentiality and integrity impact, no availability i...

CVE-2026-70306 Microsoft Office SharePoint Spoofing Vulnerability

...

EUVD-2026-56765

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70306 Microsoft Office SharePoint Spoofing Vulnerability

...

EUVD-2026-56750

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66808

CVE-2026-66808 involves deserialization of untrusted data in Microsoft Office SharePoint, allowing an authorized attacker to execute code over a network. The available documentation, including the NVD entry, states this is a remote code execution vulnerability with network access, requiring low p...

CVE-2026-66805 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

EUVD-2026-56747

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-66805

A CVE-2026-66805 entry exists with conflicting descriptions across sources. The connected Red Hat CVE details describe a flaw in the console component of a managed-cluster hub: an attacker who can write to container logs can inject malicious code into the hub console user’s browser session by vie...

CVE-2026-66805 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-64921

CVE-2026-64921 describes a privilege-elevation vulnerability in Microsoft Office SharePoint due to a missing authentication check for a critical function. An authorized attacker could escalate privileges over the network (CVSS v3.1: 8.8, HIGH; Network, Privileges Required: Low; User Interaction: ...

CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

EUVD-2026-56722

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-64916

CVE-2026-64916 affects Microsoft Office SharePoint Server and relates to improper neutralization of input during web page generation (XSS), enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 4.6 (Medium) with Network access, Low attack complexity, Low privileges r...