Priority MEDIUM 42
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Vulnerabilities
632 records
Priority MEDIUM 42
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
TI-2026-73359 CVE-2026-105013 · GHSA-fg97-fjr6-chfm
Microsoft Office SharePoint Remote Code Execution Vulnerability
Priority LOW 36
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
TI-2026-72995 CVE-2026-96044 · GHSA-5x5c-f4vh-96cj
Microsoft SharePoint Server Subscription Edition privilege escalation
Priority MEDIUM 42
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
TI-2026-72984 CVE-2026-88206 · GHSA-x6c3-m2ww-xchr
Server-side request forgery in Microsoft SharePoint enables privilege escalation
Priority LOW 36
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
TI-2026-72979 CVE-2026-88200 · GHSA-3jjh-hxw6-pghf
Privilege escalation in Microsoft SharePoint Server
Priority MEDIUM 42
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
TI-2026-72949 CVE-2026-88166 · GHSA-94rr-7cq4-rj7c
Integer overflow in Microsoft SharePoint enables remote code execution
Priority MEDIUM 42
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
TI-2026-72947 CVE-2026-88163 · GHSA-ccv3-9xcw-9pw4
Integer overflow in Microsoft Office SharePoint allows code execution
Priority MEDIUM 42
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
TI-2026-72839 CVE-2026-85932 · GHSA-r6vp-8448-xvj9
Path traversal in Microsoft SharePoint Server discloses information
Priority LOW 31
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
TI-2026-72309 CVE-2026-70246 · GHSA-vqjg-x6qf-fxr4
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Priority MEDIUM 42
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
TI-2026-72286 CVE-2026-70217 · GHSA-xw63-c8vr-8cc7
Improper access control in Microsoft SharePoint exposes information
Priority LOW 24
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
TI-2026-72273 CVE-2026-70202 · GHSA-fm2j-rw66-4jvq
Server-side request forgery in Microsoft SharePoint Server
Priority LOW 36
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
TI-2026-73195 CVE-2026-97783 · GHSA-x677-hvhp-vjwf
Cross-site scripting in Microsoft Office SharePoint enables spoofing
Priority LOW 38
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
TI-2026-73194 CVE-2026-97782 · GHSA-5p2p-hf6p-32hj
Observable discrepancy in Microsoft SharePoint allows tampering
Priority LOW 33
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
TI-2026-73168 CVE-2026-97755 · GHSA-cf68-m57w-7crh
Out-of-bounds read in Microsoft Office Excel lets attackers run code
Priority MEDIUM 42
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
TI-2026-72986 CVE-2026-88208 · GHSA-mfm4-x9fq-3v9p
Cross-site scripting in Microsoft SharePoint Server enables spoofing
Priority LOW 21
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
TI-2026-72987 CVE-2026-88209 · GHSA-jxfq-782p-3mxc
Cross-site scripting in Microsoft SharePoint Server enables spoofing
Priority LOW 21
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
TI-2026-72983 CVE-2026-88204 · GHSA-38q4-vgf7-jhvh
Cross-site scripting in Microsoft SharePoint Subscription Edition
Priority LOW 35
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
TI-2026-72978 CVE-2026-88198 · GHSA-4687-365c-pphp
Missing authorization in Microsoft SharePoint allows privilege escalation
Priority MEDIUM 41
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
TI-2026-72939 CVE-2026-88155 · GHSA-77gw-4c87-g3xj
Microsoft Office SharePoint Remote Code Execution Vulnerability
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
TI-2026-72815 CVE-2026-85900 · GHSA-cxxc-c9pf-c9rx
Deserialization flaw in Microsoft SharePoint lets attackers run code
Priority MEDIUM 43
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
TI-2026-72356 CVE-2026-70298 · GHSA-2c4p-ppx5-j84h
Path traversal in Microsoft SharePoint lets attackers disclose information
Priority LOW 31
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
TI-2026-72328 CVE-2026-70266 · GHSA-9mvx-2hw3-3g98
SQL injection in Microsoft SharePoint allows privilege escalation
Priority MEDIUM 42
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
TI-2026-72322 CVE-2026-70259 · GHSA-9gr7-mrrh-5ww6
Server-side request forgery in Microsoft SharePoint leaks data
Priority LOW 31
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
TI-2026-72314 CVE-2026-70251 · GHSA-w9hc-c5q9-3pxg
Server-side request forgery in Microsoft SharePoint Server
Priority LOW 36
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.