CVE-2026-55020

CVE-2026-55020 is an Office SharePoint cross-site scripting vulnerability described as improper neutralization of input during web page generation, enabling an authenticated attacker to spoof over the network. The affected component is Microsoft Office SharePoint; root cause is input handling in ...

CVE-2026-55021

CVE-2026-55021 affects Microsoft SharePoint Server (Office/SharePoint component). The issue is caused by improper neutralization of input during web page generation, enabling an authorized attacker to spoof over the network via a malicious link or page. The CVSSv3.1 score is 7.3 (High) with Netwo...

CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55019 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55019

CVE-2026-55019 describes an "Improper neutralization of input during web page generation" (XSS) in Microsoft Office SharePoint, enabling an authorized attacker to spoof content over the network. Multiple connected sources confirm: affected product is SharePoint Server (Microsoft Office/SharePoint...

CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55016

CVE-2026-55016 is a SharePoint-related issue affecting Microsoft Office SharePoint, described as improper neutralization of input during web page generation (XSS) that enables spoofing over a network by an authorized attacker. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) yields a bas...

CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2026-50684

CVE-2026-50684 (AD FS spoofing) : The vulnerability is described as improper neutralization of input during web page generation (XSS) in Active Directory Federation Services, enabling an authorized attacker to perform spoofing over the network. The CVSS v3.1 base metrics indicate a Medium severit...

CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability

...

CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability

...

CVE-2026-58647

CVE-2026-58647 affects Microsoft Power BI Power BI Report Server. The issue is an improper neutralization of input during web page generation, enabling cross-site scripting. Attackers must be authorized, require user interaction, and can exploit over the network to perform spoofing with high impa...

CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability

...

CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability

...

CVE-2026-58595

CVE-2026-58595 concerns the Microsoft Bing App for iOS, where an improper restriction of rendered UI layers or frames enables an unauthorized attacker to spoof over a network. The vulnerability affects the Bing iOS app’s UI rendering stack (specific component not detailed in the provided document...

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-54108

CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...