Loading feed…
No Critical or High events in this view.
Updated
Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorised attacker to perform spoofing over a network. Known-exploited catalogue reports exploitation in the wild.
Microsoft SharePoint contains a deserialisation of untrusted data vulnerability that allows an unauthorised attacker to execute code over a network. Known-exploited catalogue reports exploitation in the wild.
Microsoft Office SharePoint has a vulnerability that allows an authorised attacker to execute code over a network through deserialisation of untrusted data.
Microsoft Office SharePoint is reported to have a remote code execution vulnerability due to deserialisation of untrusted data, allowing an authorised attacker to execute code over a network.
A vulnerability in Microsoft Office SharePoint allows an authorised attacker to elevate privileges over an adjacent network.
Improper neutralisation of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorised attacker to perform spoofing over a network.
Incorrect authorisation in Microsoft Office SharePoint allows an authorised attacker to disclose information over a network.
Improper neutralisation of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorised attacker to perform spoofing over a network.
Confirm whether the affected software runs in your estate before deciding on action.
The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release.
This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates.
End of feed