CVE Catalog
CVE-2026-70355
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk0.42%
35th percentile - higher than 35% of all known CVEs
Summary
Improper neutralization of input during web page generation (cross-site scripting) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized user could exploit the XSS vulnerability to escalate privileges, potentially leading to unauthorized data access or takeover of the SharePoint site.
Recommendation
Install the latest security updates for Microsoft Office SharePoint and consider implementing additional input filtering mechanisms.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.