Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-96044 Published on October 13, 2026

Microsoft Office SharePoint Elevation of Privilege Vulnerability
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Vendor Advisory NVD

Weakness Types

Improper Validation of Specified Type of Input

The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

Improper Privilege Management

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.


Products Associated with CVE-2026-96044

Want to know whenever a new CVE is published for Microsoft Sharepoint Server? stack.watch will email you.

 

Affected Versions

Microsoft SharePoint Server Subscription Edition: