Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium6.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Vuln · CVE-2026-70259 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
High8.8Microsoft Office SharePoint Elevation of Privilege VulnerabilityVuln · CVE-2026-70266 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026
High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Vuln · CVE-2026-70251 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
High7.2Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Vuln · CVE-2026-70267 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026
Medium6.5Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Vuln · CVE-2026-105719 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 1.0%Oct 13, 2026
Medium4.3Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Vuln · CVE-2026-105720 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
Medium5.7Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.Vuln · CVE-2026-105713 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
High8.1Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.Vuln · CVE-2026-102866 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
Medium6.5Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Vuln · CVE-2026-102865 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkVuln · CVE-2026-102864 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
High8.8Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Vuln · CVE-2026-102863 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026
High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Vuln · CVE-2026-102862 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Vuln · CVE-2026-102861 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
High8.8Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Vuln · CVE-2026-102860 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkVuln · CVE-2026-102859 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NCSC Netherlands · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityVuln · CVE-2026-55040 · Microsoft · SharePoint · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointKEVEPSS 69.5%Jul 14, 2026
Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityVuln · CVE-2026-56164 · Microsoft · SharePoint · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointKEVEPSS 1.0%Jul 14, 2026
UnknownMicrosoft SharePoint Server Remote Code Execution VulnerabilityVuln · CVE-2021-27076 · Microsoft · business_productivity_servers · CVE.org · FIRST EPSS · VulnCheck KEV · Microsoft, SharePointKEVEPSS 15.2%Jun 24, 2026
High8.0Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code…Vuln · CVE-2026-47294 · microsoft · sharepoint server · FIRST EPSS · NIST NVD · Microsoft, SharePointEPSS 1.2%Jun 1, 2026
High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityVuln · CVE-2026-45659 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointKEVEPSS 2.7%May 22, 2026
High8.0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Vuln · CVE-2026-40368 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365EPSS 2.1%May 12, 2026
High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Vuln · CVE-2026-40365 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365EPSS 1.1%May 12, 2026
High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Vuln · CVE-2026-40357 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365EPSS 2.3%May 12, 2026
High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Vuln · CVE-2026-35439 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365EPSS 2.3%May 12, 2026
High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Vuln · CVE-2026-33112 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365EPSS 2.3%May 12, 2026