Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Sharepoint Server
Total 642 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-102865 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 6.5 MEDIUM
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-102864 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 4.6 MEDIUM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-102863 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.8 HIGH
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102862 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.8 HIGH
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102861 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.8 HIGH
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102860 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.8 HIGH
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-105720 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 4.3 MEDIUM
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-105719 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 6.5 MEDIUM
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-105713 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 5.7 MEDIUM
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2026-105013 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 7.4 HIGH
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-102866 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.1 HIGH
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70267 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 7.2 HIGH
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70266 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.8 HIGH
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70251 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 7.5 HIGH
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70246 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.8 HIGH
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70217 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 4.9 MEDIUM
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70202 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 7.5 HIGH
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88166 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.8 HIGH
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88163 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.8 HIGH
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88155 1 Microsoft 1 Sharepoint Server 2026-10-14 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.