Oct 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-70217 Published on October 13, 2026

Microsoft Office SharePoint Information Disclosure Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Vendor Advisory NVD

Weakness Type

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2026-70217 has been classified to as an Authorization vulnerability or weakness.


Products Associated with CVE-2026-70217

Want to know whenever a new CVE is published for Microsoft Sharepoint Server? stack.watch will email you.

 

Affected Versions

Microsoft SharePoint Server Subscription Edition: