Search Results (651 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-96044 1 Microsoft 1 Sharepoint Server 2026-10-16 8.8 High
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102865 1 Microsoft 1 Sharepoint Server 2026-10-16 6.5 Medium
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-102863 1 Microsoft 1 Sharepoint Server 2026-10-16 8.8 High
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102860 1 Microsoft 1 Sharepoint Server 2026-10-16 8.8 High
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-108452 1 Microsoft 1 Sharepoint Server 2026-10-16 8.8 High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88164 1 Microsoft 1 Sharepoint Server 2026-10-15 8.8 High
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88163 1 Microsoft 2 Sharepoint Server, Sharepoint Server Subscription Edition 2026-10-15 8.8 High
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-97755 1 Microsoft 9 365 Apps, Microsoft 365, Office 2021 and 6 more 2026-10-14 8.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-102859 1 Microsoft 1 Sharepoint Server 2026-10-14 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-97783 1 Microsoft 2 Sharepoint Server, Sharepoint Server 2019 2026-10-14 8.1 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-97782 1 Microsoft 1 Sharepoint Server 2026-10-14 6.8 Medium
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-102864 1 Microsoft 1 Sharepoint Server 2026-10-14 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-102862 1 Microsoft 1 Sharepoint Server 2026-10-14 8.8 High
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102861 1 Microsoft 2 Sharepoint Server, Sharepoint Server Subscription Edition 2026-10-14 8.8 High
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69943 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-10-14 8.8 High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88204 1 Microsoft 1 Sharepoint Server 2026-10-14 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-105013 1 Microsoft 1 Sharepoint Server 2026-10-14 7.4 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-105719 1 Microsoft 1 Sharepoint Server 2026-10-14 6.5 Medium
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-105713 1 Microsoft 1 Sharepoint Server 2026-10-14 5.7 Medium
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2026-70217 1 Microsoft 2 Sharepoint Server, Sharepoint Server Subscription Edition 2026-10-14 4.9 Medium
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.