CVE-2026-109454

Vendor

Microsoft

Product

Microsoft SharePoint Server Subscription Edition

CVSS v3.1

9.0 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weakness

CWE-79

Exposure class

Collaboration

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 50
   CVE NVD 1h ago

   Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to…

   Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

   CVSS 9.0 CVE-2026-109454 Microsoft
2. 40
   Advisory MSRC 4h ago

   Microsoft Office SharePoint Spoofing Vulnerability

   Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

   CVE-2026-109454 Microsoft