CVE-2026-88155 Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network

Description

Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft SharePoint Server Subscription Edition 16.0	16.0.0 → < 16.0.20326.20190	16.0.20326.20190

Other CVEs of Microsoft SharePoint Server Subscription Edition

The 272 CVEs of Microsoft SharePoint Server Subscription Edition →

CVE-2026-108452 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows… 8.8 High CVE-2026-88164 Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network 8.8 High CVE-2026-105013 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 7.4 High CVE-2026-96044 No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network 8.8 High