Search Results (649 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-96044 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-97783 1 Microsoft 1 Sharepoint Server 2019 2026-10-13 8.1 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-97782 1 Microsoft 1 Sharepoint Server 2026-10-13 6.8 Medium
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-97755 1 Microsoft 7 365 Apps, Office 2021, Office 2024 and 4 more 2026-10-13 8.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-105013 1 Microsoft 1 Sharepoint Server 2026-10-13 7.4 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88204 1 Microsoft 1 Sharepoint Server 2026-10-13 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-70259 1 Microsoft 1 Sharepoint Server 2026-10-13 6.5 Medium
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-105719 1 Microsoft 1 Sharepoint Server 2026-10-13 6.5 Medium
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-105713 1 Microsoft 1 Sharepoint Server 2026-10-13 5.7 Medium
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2026-102866 1 Microsoft 1 Sharepoint Server 2026-10-13 8.1 High
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-102865 1 Microsoft 1 Sharepoint Server 2026-10-13 6.5 Medium
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-102864 1 Microsoft 1 Sharepoint Server 2026-10-13 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-102863 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102862 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102860 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102859 1 Microsoft 1 Sharepoint Server 2026-10-13 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-65660 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-09-25 8.8 High
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69615 1 Microsoft 1 Sharepoint Server 2026-09-11 3.5 Low
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69464 1 Microsoft 2 Sharepoint Server, Sharepoint Server Subscription Edition 2026-09-10 8.8 High
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69402 1 Microsoft 1 Sharepoint Server 2026-09-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.