Microsoft · Cross-site scripting
Cross-site Scripting in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netw…
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
- Do not treat uncorroborated claims as confirmed breaches.
Questions to ask IT
- Do we run Microsoft SharePoint Server, and which versions?
- Is any of it reachable from the internet?
- If it is not yet patched, what mitigation is in place, and will the fix be done by 29 Nov?
Next steps
- Confirm whether this affects systems or suppliers in your estate
Vulnerability facts
Full CVE detail CVE-2026-97783- 8.1 · HighExploitable over the network without any account, but only if a user takes an action, such as opening a file or link. High impact on confidentiality and integrity.CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
- Not listed
- ~0.5% estimated chance of attack in 30 days
No technical write-up beyond these facts and the summary below yet.
Next steps
- Review the advisory against your asset inventory and patch cadence
Summary
- The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release. Microsoft recommends updating to the most current release of the SharePoint server.
Read the original reportMicrosoft Security Update Guide RSS(opens in a new tab)
Products and services involved
- Microsoft SharePoint Server93% match confidence · CVE-2026-97783
Pulse
Last checked 30 Oct · Recheck overdue since 31 Oct 2026, 23:36 UK time
- Story21 Oct 2026, 18:19 UK time · 21 Oct
Linked reporting from Microsoft Security Update Guide RSS (vendor psirt).
Read source (Microsoft Security Update Guide RSS) - Signal30 Oct 2026, 23:36 UK time · 30 Oct
in the next 30 days first recorded at 0.5% (lower likelihood signal, not confirmed exploitation).
2 entries so far. The timeline chart appears once this story has more history.
Sources
CVE-2026-97783 Microsoft Office SharePoint Spoofing Vulnerability
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorised attacker to perform spoofing over a netw…
- ProbableSummary fact75% confidence
The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release. Microsoft recommends updating to the most current release of the SharePoint server.
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-97783