Priority CRITICAL 86KEV
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.43378 · Published 2026-04-14 · Fixed in 16.0.5548.1003, 16.0.10417.20114 +1 CWE-20
Priority MEDIUM 43
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.19075 · Published 2026-04-14 · Fixed in 16.0.5548.1003, 16.0.10417.20114 +1 CWE-79
