Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-88164 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 14, 2026
Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing…CVE-2026-97783 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, SharePointEPSS 0.4%Oct 13, 2026
High7.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…CVE-2026-88204 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, SharePointEPSS 0.6%Oct 13, 2026
Medium6.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-70259 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…CVE-2026-102859 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, SharePointEPSS 0.4%Oct 13, 2026
High7.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-105013 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
High8.8No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-96044 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-88206 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
High8.8Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-88200 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-88166 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-88163 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-85932 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 1.0%Oct 13, 2026
High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70246 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
Medium4.9Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-70217 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026
High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70202 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
Medium6.8Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.CVE-2026-97782 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
Medium4.6Microsoft Office SharePoint Spoofing VulnerabilityCVE-2026-88208 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.3%Oct 13, 2026
Medium4.6Microsoft Office SharePoint Spoofing VulnerabilityCVE-2026-88209 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-88198 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
High8.8Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-88155 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-85900 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 1.5%Oct 13, 2026
Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-70298 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 1.1%Oct 13, 2026
High8.8Microsoft Office SharePoint Elevation of Privilege VulnerabilityCVE-2026-70266 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026
High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70251 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
High7.2Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-70267 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026