Search Results (651 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-105013 1 Microsoft 1 Sharepoint Server 2026-10-14 7.4 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-105719 1 Microsoft 1 Sharepoint Server 2026-10-14 6.5 Medium
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-105713 1 Microsoft 1 Sharepoint Server 2026-10-14 5.7 Medium
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2026-70217 1 Microsoft 2 Sharepoint Server, Sharepoint Server Subscription Edition 2026-10-14 4.9 Medium
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70259 1 Microsoft 1 Sharepoint Server 2026-10-14 6.5 Medium
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-102866 1 Microsoft 1 Sharepoint Server 2026-10-14 8.1 High
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-88206 1 Microsoft 1 Sharepoint Server 2026-10-13 7.5 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88200 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88166 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-85932 1 Microsoft 1 Sharepoint Server 2026-10-13 6.5 Medium
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70246 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70202 1 Microsoft 1 Sharepoint Server 2026-10-13 7.5 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88208 1 Microsoft 1 Sharepoint Server 2026-10-13 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88209 1 Microsoft 1 Sharepoint Server 2026-10-13 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88198 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88155 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-85900 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70298 1 Microsoft 1 Sharepoint Server 2026-10-13 6.5 Medium
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70266 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70251 1 Microsoft 1 Sharepoint Server 2026-10-13 7.5 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.