CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability

...

EUVD-2026-56291

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-57105

CVE-2026-57105 is a cross-site scripting vulnerability in Microsoft Office SharePoint caused by improper neutralization of input during web page generation. An authorized attacker could perform network spoofing. The CVSSv3.1 base score is 8.0 ( HIGH ) with Network attack vector, low attack comple...

CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability

...

CVE-2026-62829

CVE-2026-62829 describes an XSS-like input handling flaw in Microsoft Office SharePoint that allows an authorized attacker to perform spoofing over a network. The root cause is the improper neutralization of input during web page generation. Affected product is Microsoft SharePoint Server; the CV...

CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability

...

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE-2026-55040 CVSS 9.1, affects SharePoint Server Subscription...

Microsoft SharePoint Server Spoofing Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft SharePoint Server Tampering Vulnerability

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...