Search Results (678 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-66805 2 Microsoft, Redhat 4 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 and 1 more 2026-11-10 8.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-105720 1 Microsoft 1 Sharepoint Server 2026-11-10 4.3 Medium
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-120002 1 Microsoft 1 Sharepoint Server 2026-11-10 9.9 Critical
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-120000 1 Microsoft 1 Sharepoint Server 2026-11-10 7.5 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-124210 1 Microsoft 1 Sharepoint Server 2026-11-10 6.5 Medium
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-123391 1 Microsoft 1 Sharepoint Server 2026-11-10 8.8 High
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-123390 1 Microsoft 1 Sharepoint Server 2026-11-10 8.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-112736 1 Microsoft 1 Sharepoint Server 2026-11-10 5.3 Medium
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-111303 1 Microsoft 1 Sharepoint Server 2026-11-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-111300 1 Microsoft 1 Sharepoint Server 2026-11-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-111297 1 Microsoft 1 Sharepoint Server 2026-11-10 8 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-111296 1 Microsoft 1 Sharepoint Server 2026-11-10 8 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-110065 1 Microsoft 1 Sharepoint Server 2026-11-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-110057 1 Microsoft 1 Sharepoint Server 2026-11-10 6.5 Medium
Authorization bypass through user-controlled key in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-110045 1 Microsoft 1 Sharepoint Server 2026-11-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-110044 1 Microsoft 1 Sharepoint Server 2026-11-10 8.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-109504 1 Microsoft 1 Sharepoint Server 2026-11-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-109502 1 Microsoft 1 Sharepoint Server 2026-11-10 8.8 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-109499 1 Microsoft 1 Sharepoint Server 2026-11-10 8.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-109497 1 Microsoft 1 Sharepoint Server 2026-11-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.