Microsoft Sharepoint Server

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62917 4.6 - Medium - August 11, 2026

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Improper Input Validation

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62839 6.5 - Medium - August 11, 2026

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Insufficiently Protected Credentials

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-58639 6.5 - Medium - August 11, 2026

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

SSRF

Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-70326 8.8 - High - August 11, 2026

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

SSRF

Aug 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-70306 9.3 - Critical - August 11, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

XSS

Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-66808 8.8 - High - August 11, 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Marshaling, Unmarshaling

Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-66805 8.8 - High - August 11, 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Marshaling, Unmarshaling

Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-64921 8.8 - High - August 11, 2026

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Missing Authentication for Critical Function

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64916 4.6 - Medium - August 11, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS

Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-64901 8.8 - High - August 11, 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Marshaling, Unmarshaling

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64902 4.6 - Medium - August 11, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64900 7.3 - High - August 11, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64897 4.6 - Medium - August 11, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS

Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-70355 7.3 - High - August 11, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

XSS

Aug 2026: Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2026-70324 8.8 - High - August 11, 2026

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

SSRF

Aug 2026: Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-70321 8.8 - High - August 11, 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Marshaling, Unmarshaling

Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-65665 8.8 - High - August 11, 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Marshaling, Unmarshaling

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-65660 6.5 - Medium - August 11, 2026

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Code Injection

Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-65663 8.8 - High - August 11, 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Marshaling, Unmarshaling

Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-65658 8.8 - High - August 11, 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Marshaling, Unmarshaling

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64922 4.6 - Medium - August 11, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS

Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-63520 8.1 - High - August 11, 2026

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Improper Input Validation

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-63516 6.5 - Medium - August 11, 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Marshaling, Unmarshaling

Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-63514 8.8 - High - August 11, 2026

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Marshaling, Unmarshaling

Aug 2026: Microsoft SharePoint Server Tampering Vulnerability
CVE-2026-63512 6.5 - Medium - August 11, 2026

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

AuthZ

Aug 2026: Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2026-62837 6.5 - Medium - August 11, 2026

Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Relative Path Traversal

Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-62827 8.8 - High - August 11, 2026

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

authentification

Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62829 4.6 - Medium - August 11, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS

Aug 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-57105 8 - High - August 11, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS

Jul 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62826 4.6 - Medium - July 16, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS

Jul 2026: Microsoft Office Information Disclosure Vulnerability
CVE-2026-55121 5.5 - Medium - July 14, 2026

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds Read

Jul 2026: Microsoft Office Information Disclosure Vulnerability
CVE-2026-56192 5.5 - Medium - July 14, 2026

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds Read

Jul 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-56157 5.4 - Medium - July 14, 2026

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Authorization

Jul 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-55135 4.6 - Medium - July 14, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS

Jul 2026: Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2026-55052 8.8 - High - July 14, 2026

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

AuthZ

Jul 2026: Microsoft Word Remote Code Execution Vulnerability
CVE-2026-55130 7.8 - High - July 14, 2026

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Heap-based Buffer Overflow

Jul 2026: Microsoft Word Remote Code Execution Vulnerability
CVE-2026-55128 7.8 - High - July 14, 2026

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Dangling pointer

Jul 2026: Microsoft Word Information Disclosure Vulnerability
CVE-2026-55142 5.5 - Medium - July 14, 2026

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Numeric Truncation Error

Jul 2026: Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2026-55040 9.1 - Critical - July 14, 2026

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

1390

Jul 2026: Microsoft Word Remote Code Execution Vulnerability
CVE-2026-55134 7.8 - High - July 14, 2026

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Stack Overflow

Jul 2026: Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2026-55051 6.5 - Medium - July 14, 2026

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

SSRF

Jul 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-55126 7.3 - High - July 14, 2026

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS

Jul 2026: Microsoft Word Remote Code Execution Vulnerability
CVE-2026-55132 7.8 - High - July 14, 2026

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Double-free

Jul 2026: Microsoft Word Remote Code Execution Vulnerability
CVE-2026-55038 7.8 - High - July 14, 2026

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Stack Overflow

Jul 2026: Microsoft Word Remote Code Execution Vulnerability
CVE-2026-55055 7.8 - High - July 14, 2026

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Stack Overflow

Jul 2026: Microsoft Office Information Disclosure Vulnerability
CVE-2026-55035 5.5 - Medium - July 14, 2026

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds Read

Jul 2026: Microsoft Word Remote Code Execution Vulnerability
CVE-2026-55127 7.8 - High - July 14, 2026

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Heap-based Buffer Overflow

Jul 2026: Microsoft Word Information Disclosure Vulnerability
CVE-2026-55124 5.5 - Medium - July 14, 2026

Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Improper Validation of Specified Type of Input

Jul 2026: Microsoft Word Remote Code Execution Vulnerability
CVE-2026-55033 7.8 - High - July 14, 2026

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Integer Overflow or Wraparound

Jul 2026: Microsoft Word Remote Code Execution Vulnerability
CVE-2026-55032 7.8 - High - July 14, 2026

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Dangling pointer