Live · 98 sources · updated 13m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-102863

CVSS 8.8

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a…

Vendor
Microsoft
Product
office, sharepoint
CVSS
8.8
EPSS
0.010 (p64)
Exposure class
Collaboration

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. CVE NVD

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a…

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  2. Advisory MSRC

    CVE-2026-102863 Microsoft Office SharePoint Elevation of Privilege Vulnerability

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help