Microsoft Office SharePoint vulnerabilities
106 known CVE vulnerabilities in Microsoft Office SharePoint, translated and rated.
- CVE-2026-45464Medium
A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to inject malicious script into a web page. The attack can lead to content spoofing and credential theft.
- CVE-2026-45462Medium
XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- CVE-2026-45454Medium
A path traversal vulnerability in Microsoft Office SharePoint allows an authorized attacker to execute code remotely. The issue stems from improper limitation of a pathname to a restricted directory.
- CVE-2026-45453Medium
XSS vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-33113Medium
Microsoft Office SharePoint contains a cross-site scripting (XSS) vulnerability due to improper input neutralization during page generation. An unauthorized attacker can exploit this to perform spoofing over a network.
- CVE-2026-47294High
Microsoft Office SharePoint contains an OS command injection vulnerability. An authorized attacker can execute code remotely due to improper neutralization of special elements.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

