Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-108452 · Microsoft · Microsoft SharePoint Server Subscription Edition · CVE.org · NIST NVD · Microsoft, Microsoft 365Oct 15, 2026
Medium6.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-70259 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
High8.8Microsoft Office SharePoint Elevation of Privilege VulnerabilityCVE-2026-70266 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026
High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70251 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
High7.2Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-70267 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026
High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-69943 · Microsoft · Microsoft SharePoint Enterprise Server 2016 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
Medium6.5Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-105719 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 1.0%Oct 13, 2026
Medium4.3Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-105720 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
Medium5.7Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.CVE-2026-105713 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
High8.1Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.CVE-2026-102866 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
Medium6.5Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-102865 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCVE-2026-102864 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
High8.8Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102863 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026
High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102862 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102861 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
High8.8Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102860 · Microsoft · Microsoft SharePoint Server Subscription Edition · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCVE-2026-102859 · microsoft · sharepoint server · CVE.org · FIRST EPSS · NCSC Netherlands · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
High8.1Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing…CVE-2026-97783 · Microsoft · SharePoint · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, SharePointEPSS 0.4%Oct 13, 2026
Medium6.8Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.CVE-2026-97782 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
High8.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97755 · microsoft · 365 apps · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
High8.8No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-96044 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCVE-2026-88209 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.4%Oct 13, 2026
Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCVE-2026-88208 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.3%Oct 13, 2026
High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-88206 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
High7.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…CVE-2026-88204 · Microsoft · SharePoint · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, SharePointEPSS 0.6%Oct 13, 2026