Microsoft Office SharePoint vulnerabilities
78 known CVE vulnerabilities in Microsoft Office SharePoint, translated and rated.
- CVE-2026-55030Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network due to improper input neutralization during web page generation.
- CVE-2026-55021High
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The flaw is due to improper neutralization of input during web page generation.
- CVE-2026-55020Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The flaw is caused by improper neutralization of input during web page generation.
- CVE-2026-55019Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The issue stems from improper neutralization of input during web page generation.
- CVE-2026-55016Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The issue stems from improper neutralization of input during web page generation.
- CVE-2026-54108Medium
A vulnerability in Microsoft Office SharePoint allows an authorized attacker to control file names or paths, enabling network spoofing. The issue stems from external control over these parameters.
- CVE-2026-48562Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-48560Medium
A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-47641Medium
An improper input validation vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-47640Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-47639Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-47638Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-47637Medium
XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-47636Medium
XSS vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-47634High
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-47298High
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- CVE-2026-45484High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
- CVE-2026-45481High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-45479Medium
XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-45468Medium
XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-45467Medium
XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-45465Medium
XSS vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-45464Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to inject malicious script into a web page. The attack can lead to content spoofing and credential theft.
- CVE-2026-45462Medium
XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-45454Medium
A path traversal vulnerability in Microsoft Office SharePoint allows an authorized attacker to execute code remotely. The issue stems from improper limitation of a pathname to a restricted directory.
- CVE-2026-45453Medium
XSS vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-33113Medium
Microsoft Office SharePoint contains a cross-site scripting (XSS) vulnerability due to improper input neutralization during page generation. An unauthorized attacker can exploit this to perform spoofing over a network.
- CVE-2026-47294High
Microsoft Office SharePoint contains an OS command injection vulnerability. An authorized attacker can execute code remotely due to improper neutralization of special elements.

