CVE Intelligence

Vulnerabilidades do Microsoft Microsoft SharePoint Server Subscription Edition

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Microsoft Microsoft SharePoint Server Subscription Edition: 118 registro(s), com versões afetadas e correções.

CVE-2026-88164 Alta · 8.8 CWE-862 14/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-97782 Média · 6.8 CWE-203 13/10/2026
Microsoft Office SharePoint Tampering Vulnerability
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-97755 Alta · 8.8 CWE-125 13/10/2026
Microsoft Office Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-96044 Alta · 8.8 CWE-269 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88209 Média · 4.6 CWE-79 13/10/2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88208 Média · 4.6 CWE-79 13/10/2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88206 Alta · 7.5 CWE-918 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88204 Alta · 7.3 CWE-79 13/10/2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88200 Alta · 8.8 CWE-270 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88198 Alta · 8.8 CWE-862 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88166 Alta · 8.8 CWE-121 13/10/2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88163 Alta · 8.8 CWE-122 13/10/2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88155 Alta · 8.8 CWE-122 13/10/2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-85932 Média · 6.5 CWE-22 13/10/2026
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-85900 Alta · 8.8 CWE-502 13/10/2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70298 Média · 6.5 CWE-22 13/10/2026
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70267 Alta · 7.2 CWE-829 13/10/2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70266 Alta · 8.8 CWE-89 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70259 Média · 6.5 CWE-918 13/10/2026
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70251 Alta · 7.5 CWE-918 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70246 Alta · 8.8 CWE-863 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70217 Média · 4.9 CWE-284 13/10/2026
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70202 Alta · 7.5 CWE-918 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69943 Alta · 8.8 CWE-22 13/10/2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-105720 Média · 4.3 CWE-863 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.