Microsoft Sharepoint Server vulnerabilities

CVE-2026-105719 Medium · 6.5 CWE-20 Oct 13, 2026

Microsoft SharePoint Server Information Disclosure Vulnerability

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-105713 Medium · 5.7 CWE-918 Oct 13, 2026

Microsoft Office SharePoint Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

CVE-2026-105013 High · 7.4 CWE-502 Oct 13, 2026

Microsoft Office SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-102866 High · 8.1 CWE-347 Oct 13, 2026

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-102865 Medium · 6.5 CWE-863 Oct 13, 2026

Microsoft Office SharePoint Information Disclosure Vulnerability

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-102864 Medium · 4.6 CWE-79 Oct 13, 2026

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-102863 High · 8.8 CWE-94 Oct 13, 2026

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102862 High · 8.8 CWE-863 Oct 13, 2026

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102861 High · 8.8 CWE-862 Oct 13, 2026

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102860 High · 8.8 CWE-284 Oct 13, 2026

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102859 Medium · 4.6 CWE-79 Oct 13, 2026

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-69904 Low · 3.5 CWE-918 Sep 8, 2026

Microsoft Office SharePoint Information Disclosure Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-69804 High · 7.5 CWE-367 Sep 8, 2026

Microsoft Office SharePoint Remote Code Execution Vulnerability

Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69724 High · 8.8 CWE-862 Sep 8, 2026

Microsoft Office SharePoint Remote Code Execution Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69716 High · 8.8 CWE-89 Sep 8, 2026

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-69690 Medium · 5.4 CWE-79 Sep 8, 2026

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-69683 High · 7.7 CWE-918 Sep 8, 2026

Microsoft Office SharePoint Information Disclosure Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-69636 Medium · 6.5 CWE-89 Sep 8, 2026

Microsoft Office SharePoint Information Disclosure Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-69615 Medium · 4.8 CWE-79 Sep 8, 2026

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-69465 High · 8.8 CWE-862 Sep 8, 2026

Microsoft Office SharePoint Remote Code Execution Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69464 High · 8.8 CWE-250 Sep 8, 2026

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-69417 Medium · 5.4 CWE-79 Sep 8, 2026

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-69409 Medium · 6.5 CWE-250 Sep 8, 2026

Microsoft Office SharePoint Information Disclosure Vulnerability

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-69402 Medium · 5.4 CWE-79 Sep 8, 2026

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-69282 High · 8.8 CWE-284 Sep 8, 2026

Microsoft Office SharePoint Remote Code Execution Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.