CVE-2026-45465

40th percentile - higher than 40% of all known CVEs

A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to inject malicious script into a web page. The attack can lead to spoofing or session hijacking.

The organization is exposed to phishing attacks and credential theft, which may result in information confidentiality breaches and user account compromise.

Apply the security update provided by Microsoft for Microsoft Office SharePoint immediately. Additionally, implement input filtering and output encoding mechanisms in web applications.