Search Results (649 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-102861 1 Microsoft 2 Sharepoint Server, Sharepoint Server Subscription Edition 2026-10-14 8.8 High
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102866 1 Microsoft 1 Sharepoint Server 2026-10-14 8.1 High
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-88206 1 Microsoft 1 Sharepoint Server 2026-10-13 7.5 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88200 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88166 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88163 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-85932 1 Microsoft 1 Sharepoint Server 2026-10-13 6.5 Medium
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70246 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70217 1 Microsoft 1 Sharepoint Server 2026-10-13 4.9 Medium
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70202 1 Microsoft 1 Sharepoint Server 2026-10-13 7.5 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88208 1 Microsoft 1 Sharepoint Server 2026-10-13 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88209 1 Microsoft 1 Sharepoint Server 2026-10-13 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88198 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88155 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-85900 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70298 1 Microsoft 1 Sharepoint Server 2026-10-13 6.5 Medium
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70266 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70251 1 Microsoft 1 Sharepoint Server 2026-10-13 7.5 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70267 1 Microsoft 1 Sharepoint Server 2026-10-13 7.2 High
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69943 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-10-13 8.8 High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.