| CVE-2026-70251 | 高7.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-70246 | 高8.8 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-70217 | 中4.9 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 13/10/2026 |
| CVE-2026-70202 | 高7.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-69943 | 高8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 13/10/2026 |
| CVE-2026-105720 | 中4.3 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-105719 | 中6.5 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 13/10/2026 |
| CVE-2026-105713 | 中5.7 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. | 13/10/2026 |
| CVE-2026-105013 | 高7.4 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 13/10/2026 |
| CVE-2026-102866 | 高8.1 | Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-102865 | 中6.5 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 13/10/2026 |
| CVE-2026-102864 | 中4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 13/10/2026 |
| CVE-2026-102863 | 高8.8 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-102862 | 高8.8 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-102861 | 高8.8 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-102860 | 高8.8 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-102859 | 中4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 13/10/2026 |
| CVE-2026-69904 | 低3.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-69804 | 高7.5 | Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-69724 | 高8.8 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 08/09/2026 |