Microsoft Sharepoint Server Subscription Edition vulnerabilities

CVE-2026-70217 [MEDIUM] CWE-284 CVE-2026-70217: Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose inf Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-105713 [MEDIUM] CWE-918 CVE-2026-105713: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to p Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

CVE-2026-47634 [MEDIUM] CWE-74 CVE-2026-47634: Improper neutralization of special elements in output used by a downstream component ('injection') i Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2023-33129 [MEDIUM] CWE-122 CVE-2023-33129: Microsoft SharePoint Server Denial of Service Vulnerability Microsoft SharePoint Server Denial of Service Vulnerability

CVE-2026-48560 [MEDIUM] CWE-502 CVE-2026-48560: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to pe Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-47641 [MEDIUM] CWE-20 CVE-2026-47641: Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform sp Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2022-24472 [MEDIUM] CVE-2022-24472: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2021-42320 [MEDIUM] CWE-290 CVE-2021-42320: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-33113 [MEDIUM] CWE-79 CVE-2026-33113: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-97783 [MEDIUM] CWE-79 CVE-2026-97783: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-55026 [MEDIUM] CWE-190 CVE-2026-55026: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose infor Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2023-21743 [MEDIUM] CWE-306 CVE-2023-21743: Microsoft SharePoint Server Security Feature Bypass Vulnerability Microsoft SharePoint Server Security Feature Bypass Vulnerability

CVE-2026-56192 [MEDIUM] CWE-125 CVE-2026-56192: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55028 [MEDIUM] CWE-125 CVE-2026-55028: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55124 [MEDIUM] CWE-20 CVE-2026-55124: Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attac Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-55050 [MEDIUM] CWE-125 CVE-2026-55050: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-55027 [MEDIUM] CWE-125 CVE-2026-55027: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55047 [MEDIUM] CWE-125 CVE-2026-55047: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55023 [MEDIUM] CWE-125 CVE-2026-55023: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-45481 [MEDIUM] CWE-79 CVE-2026-45481: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.