CVE-2026-69282

This vulnerability in Microsoft Office SharePoint stems from improper access control , allowing an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity but requi...

CVE-2026-69464

Microsoft Office SharePoint contains an elevation of privilege vulnerability characterized as execution with unnecessary privileges. An authorized attacker with low privileges can exploit this over a network to escalate their access, with high impact on confidentiality, integrity, and availabilit...

CVE-2026-47640

CVE-2026-47640 – Details : Affects Microsoft Office SharePoint (SharePoint Server). The vulnerability is an improper neutralization of input during web page generation (XSS), enabling an authorized attacker to perform spoofing over a network. The connected documents do not specify affected versio...

CVE-2026-69636

CVE-2026-69636 is an SQL injection vulnerability in Microsoft Office SharePoint , caused by improper neutralization of special elements used in SQL commands. An authorized attacker with low privileges can exploit it over a network to disclose information , with high confidentiality impact but no ...

CVE-2026-20959

CVE-2026-20959 is a cross-site scripting vulnerability in Microsoft Office SharePoint (Server/Subscription Edition) caused by improper neutralization of input during web page generation. An authorized attacker could spoof a user over the network. Affected products include SharePoint Server (2016/...

CVE-2026-69904

A server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. The flaw requires user interaction and low privileges (CVSS 3.1: 3.5 – LOW ). CISA's SSVC assessment indicates no known exploitation , the vulner...

CVE-2026-20945

CVE-2026-20945 (SharePoint) is an XSS-style vulnerability in Microsoft Office SharePoint where improper input neutralization during web page generation could allow an authorized attacker to spoof another user. Connected documents confirm the issue impacts SharePoint components and is being addres...

CVE-2026-45479

The CVE-2026-45479 entries describe an XSS vulnerability in Microsoft Office SharePoint where improper neutralization of input during web page generation can enable an authorized attacker to perform spoofing over the network. Affected product is SharePoint/SharePoint Server; the root cause is lac...

CVE-2026-69417

CVE-2026-69417 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker with low privileges can perform spoofing over a network , requiring user interaction. The CVSS 3.1 score is 7...

CVE-2026-69683

CVE-2026-69683 is a server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint that allows an authorized attacker (low privileges) to disclose information over a network. The impact is classified as high confidentiality with no integrity or availability impact. NVD assigns a ...

CVE-2026-69690

Microsoft Office SharePoint is affected by an improper neutralization of input during web page generation (cross-site scripting ), allowing an authorized attacker to perform spoofing over a network. The vulnerability requires low privileges and user interaction , with impacts limited to low confi...

CVE-2026-69615

CVE-2026-69615 is an improper neutralization of input during web page generation (cross-site scripting) vulnerability in Microsoft Office SharePoint . An authorized attacker with high privileges and required user interaction can perform spoofing over a network . NVD rates it 4.8 (MEDIUM) ; Micros...

CVE-2026-69716

Microsoft Office SharePoint is affected by a SQL injection vulnerability (improper neutralization of special elements in an SQL command) that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with network attack vector, low complexity, lo...

CVE-2026-69402

CVE-2026-69402 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker (low privileges required) can exploit it over the network with low complexity and user interaction to perform...

CVE-2026-88164

A Missing Authorization vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This issue is associated with CWE-862 . While specific technical details regarding the affected component or root cause are not provided, the vulnerability has ...

CVE-2026-102865

A vulnerability in Microsoft Office SharePoint was identified where incorrect authorization allows an authorized attacker to disclose information over a network. This issue results in access to sensitive data and has been assigned a CVSS 3.1 score of 6.50 (Medium) . Microsoft has released updates...

CVE-2026-69409

Microsoft Office SharePoint is affected by an information disclosure vulnerability caused by execution with unnecessary privileges , allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) with high confidentiality impact but no integrity or avai...

CVE-2026-69943

A path traversal vulnerability (improper limitation of a pathname to a restricted directory) exists in Microsoft Office SharePoint . This flaw allows an authorized attacker to achieve arbitrary code execution over a network. Microsoft has released updates to address this vulnerability; users are ...

CVE-2026-70267

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform remote code execution over a network. The root cause is the inclusion of functionality from untrusted control sphere (CWE-829). This issue has a CVSS v3.1 score of 7.2 (High) , impacting confidentiality, integ...

CVE-2026-97755

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a High severity (CVSS 3.1 score of 8.8 ) and requires user interaction, such as the victim opening a malicious file or clicking a malicious...

CVE-2026-108452

A path traversal vulnerability (CWE-22) exists in Microsoft Office SharePoint , where improper limitation of a pathname to a restricted directory allows an authorized attacker to execute code over a network . The vulnerability is associated with the security update for SharePoint Server Subscript...

CVE-2026-88166

Microsoft Office SharePoint is affected by CVE-2026-88166 , which involves an integer overflow or wraparound vulnerability. An authorized attacker can exploit this flaw to achieve arbitrary code execution over a network. Microsoft has released security updates to address this vulnerability; users...

CVE-2026-85900

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. This flaw is categorized as CWE-502 and has a CVSS 3.1 score of 8.80 (High). Microsoft has released official updates to address this v...

CVE-2026-88155

A heap-based buffer overflow exists in Microsoft Office SharePoint , which allows an authorized attacker to achieve arbitrary code execution over a network. The vulnerability has a CVSS v3.1 base score of 8.80 (High). Microsoft has released security updates to address this vulnerability; users ar...

CVE-2026-105713

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint . This flaw allows an authorized attacker to perform spoofing over an adjacent network . The vulnerability has a CVSS 3.1 base score of 5.7 (Medium) . Microsoft has released updates to address this issue; use...

CVE-2026-70266

A SQL injection vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of special elements used in an SQL command. This flaw allows an authorized attacker to elevate privileges over a network. Microsoft has released updates to address this issue, and users are enco...

CVE-2026-88200

A Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This vulnerability is characterized by a HIGH base severity score of 8.8 (CVSS v3.1), with impacts on confidentiality, integrity, and availability. Microsoft has ...

CVE-2026-96044

A Privilege Escalation vulnerability exists in Microsoft Office SharePoint . This issue allows an authorized attacker to elevate their privileges over a network. The vulnerability has a High base severity with a CVSS score of 8.8 . Microsoft has released updates to address this issue; users are r...

CVE-2026-102859

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released security updates to address this issue; users...

CVE-2026-102863

A code injection vulnerability (CWE-94 ) exists in Microsoft Office SharePoint , where an authorized attacker can elevate privileges over a network. This vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released updates to address this issue; users are encouraged to install the la...

CVE-2026-105720

A vulnerability exists in Microsoft Office SharePoint due to incorrect authorization . This flaw allows an authorized attacker to perform privilege escalation over a network. Microsoft has released updates to address this issue; users are encouraged to install the latest security patches via the ...

CVE-2026-88208

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released security updates to address this issue, and u...

CVE-2026-102860

A privilege escalation vulnerability exists in Microsoft Office SharePoint due to improper access control . An authorized attacker can exploit this flaw over a network to gain elevated privileges. Microsoft has released updates to address this vulnerability; users are recommended to install the l...

CVE-2026-70202

A Server-Side Request Forgery (SSRF) vulnerability exists in Microsoft Office SharePoint . This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been addressed by Microsoft , and users are encouraged to install the latest updates provided in the offic...

CVE-2026-70246

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network due to incorrect authorization . The impact is rated as High with a CVSS score of 8.8 . Microsoft has released official fixes to address this issue; users are recommended to install t...

CVE-2026-88198

A missing authorization vulnerability in Microsoft Office SharePoint (CVE-2026-88198) allows an authorized attacker to elevate privileges over a network. The impact is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released official updates to address this issue; users are recommended ...

CVE-2026-88204

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released updates to address this vulnerability; users ...

CVE-2026-102861

A missing authorization vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This issue is categorized as a high-severity vulnerability with a CVSS 3.1 base score of 8.80 . While the underlying root cause is identified as missing authori...

CVE-2026-88163

An integer overflow or wraparound vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve remote code execution over a network. While the NCSC advisory lists this CVE under SharePoint, it notes the impact as "Not a Vulnerability" (translated from the source text), co...

CVE-2026-105013

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. The impact of this vulnerability is rated as High with a CVSS score of 7.40 . Microsoft has released updates to address this issue, an...

CVE-2026-70259

A Server-Side Request Forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , allowing an authorized attacker to disclose information over a network. The vulnerability is categorized under CWE-918 and has a CVSS 3.1 score of 6.5 (Medium) . Microsoft has released security updates to a...

CVE-2026-102862

A vulnerability in Microsoft Office SharePoint (CVE-2026-102862) allows an authorized attacker to achieve privilege escalation over a network due to incorrect authorization (CWE-863). The issue has a CVSS 3.1 score of 8.8 (High) , with high impact on confidentiality, integrity, and availability. ...

CVE-2026-88206

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , which allows an authorized attacker to elevate privileges over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 7.5 (High) . Microsoft has released official updates to address this is...

CVE-2026-102864

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released updates to address this issue; users are enco...

CVE-2026-88209

A Cross-Site Scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to improper neutralization of input during web page generation. An authorized attacker can exploit this flaw over a network to perform spoofing . Microsoft has released security updates to address this issue; use...

CVE-2026-85932

A path traversal vulnerability exists in Microsoft Office SharePoint due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to disclose sensitive information over a network. Microsoft has released security updates to address this issue, and ...

CVE-2026-105719

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network due to improper input validation . The impact is categorized as access to sensitive data with a CVSSv3.1 base score of 6.5. Microsoft has released updates to address this vulnerabil...

CVE-2026-70217

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network due to improper access control (CWE-284). The impact is classified as access to sensitive data with a CVSSv3.1 base score of 4.9 . Microsoft has released updates to address this vul...

CVE-2026-70298

A path traversal vulnerability in Microsoft Office SharePoint (CVE-2026-70298) allows an authorized attacker to disclose sensitive information over a network due to an improper limitation of a pathname to a restricted directory. Microsoft has released updates to address this issue; users are enco...

CVE-2026-70251

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , as detailed in CVE-2026-70251 . This flaw allows an authorized attacker to achieve privilege escalation over a network. Microsoft has released official updates to address this issue; users are encouraged to...