CVE Catalog
CVE-2026-57105
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk0.49%
40th percentile - higher than 40% of all known CVEs
Summary
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Risk Assessment
An attacker could impersonate trusted content, potentially leading to data theft or malware distribution.
Recommendation
Apply the latest security updates for Microsoft Office SharePoint.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.