CVE record · 2 sources
CVE-2026-108452
CVSS 8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to…
- Vendor
- Microsoft
- Product
- office, sharepoint
- CVSS
- 8.8
- EPSS
- 0.008 (p57)
- Exposure class
- Collaboration
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to…
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
CVE-2026-108452 Microsoft Office SharePoint Remote Code Execution Vulnerability
Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have…