CVE Catalog

CVE-2026-65660

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.68%

49th percentile - higher than 49% of all known CVEs

Summary

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Risk Assessment

An attacker could impersonate trusted sources, potentially leading to fraud or data theft.

Recommendation

Apply security updates for Microsoft Office SharePoint and restrict user privileges.

Original NVD description (English source)

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS