EUVD-2026-56703

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability

...

EUVD-2026-56702

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64900

CVE-2026-64900 affects Microsoft Office SharePoint and is described as an improper neutralization of input during web page generation (XSS) that enables an authorized attacker to perform spoofing over a network. Exploitation requires network access, low attack complexity, low privileges , and use...

CVE-2026-64902

CVE-2026-64902 affects Microsoft Office SharePoint. It arises from improper neutralization of input during web page generation, enabling spoofing by an authorized attacker over a network. CVSS 3.1: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N; base score 4.6 (Medium). Exploitation status and concrete reme...

CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability

...

EUVD-2026-56700

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-64897

CVE-2026-64897 describes an XSS vulnerability in Microsoft Office SharePoint Server due to improper neutralization of input during web page generation. An authorized attacker could spoof users over the network. Documents indicate the flaw and its impact as spoofing, with CVSSv3.1 base score 4.6 (...

CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability

...

EUVD-2026-56602

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70355

CVE-2026-70355 affects Microsoft Office SharePoint/SharePoint Server; improper neutralization of input during web page generation (XSS) could allow an authorized attacker to elevate privileges over the network. The CVSSv3.1 base score is 7.3 (HIGH) with NETWORK attack vector, LOW attack complexit...

CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

EUVD-2026-56582

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-70324

CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...