CVE-2026-70332

CVE-2026-70332 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an unauthorized attacker to perform network spoofing. The connected sources consistently identify SharePoint as affected and report SSRF as the underlying issue, with related entries also refe...

CVE-2025-59245

CVE-2025-59245 is a Microsoft SharePoint Online elevation-of-privilege vulnerability. Connected sources describe the flaw as a code/ deserialization issue in SharePoint Online that could allow an attacker with network access and no user interaction to achieve high-impact permissions escalation (C...