8.8
Élevée
CVE-2026-102863 Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker…
Description
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft SharePoint Server Subscription Edition 16.0 | 16.0.0 → < 16.0.20326.20190 | 16.0.20326.20190 |
Références
- Microsoft Office SharePoint Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft SharePoint Server Subscription Edition
Les 272 CVE de Microsoft SharePoint Server Subscription Edition →
CVE-2026-108452
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows…
8.8
Élevée
CVE-2026-88164
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network
8.8
Élevée
CVE-2026-105013
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a…
7.4
Élevée
CVE-2026-96044
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network
8.8
Élevée