10166 matches found
CVE-2026-88164
A Missing Authorization vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This issue is associated with CWE-862 . While specific technical details regarding the affected component or root cause are not provided, the vulnerability has ...
PT-2026-114316
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
Security Updates for Microsoft SharePoint Server Subscription Edition (October 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution via integer overflow in Microsoft Office SharePoint CVE-2026-88166 - Elevation of Privilege in SharePoi...
CVE-2026-97782
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network...
CVE-2026-97783
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-96044
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-88204
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-88209
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-88206
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-88208
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-88198
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-88200
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-88166
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-88163
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-88155
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-85932
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-85900
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-70298
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...