Priority MEDIUM 45
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.013 · Published 2026-03-10 · Fixed in 16.0.5543.1000, 16.0.10417.20102 +1 CWE-79
Priority MEDIUM 43
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01583 · Published 2026-03-10 · Fixed in 16.0.5543.1000, 16.0.10417.20102 +1 CWE-20
Priority LOW 39
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00613 · Published 2026-03-10 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5543.1000 +3 CWE-822
