Skip to content

CVE record · 2 sources

CVE-2026-109466

CVSS 8.0

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.

Vendor: Microsoft
Product: Microsoft SharePoint Server Subscription Edition
CVSS v3.1: 8.0 AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-862
Exposure class: Collaboration

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

42

CVE NVD 2h ago

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.

CVSS 8.0 CVE-2026-109466 Microsoft
40

Advisory MSRC 5h ago

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-109466 Microsoft