Skip to content

CVE record · 2 sources

CVE-2026-120002

CVSS 9.9

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Vendor: Microsoft
Product: Microsoft SharePoint Server Subscription Edition
CVSS v3.1: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-863
Exposure class: Collaboration

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

62

Tenable research Tenable 3h ago

Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

63 Critical 1029 Important 1 Moderate 0 Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as…

Exploited CVSS 6.5 Fix available CVE-2026-124194 CVE-2026-118146 CVE-2026-120002+17 more Microsoft
53

CVE NVD 3h ago

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVSS 9.9 CVE-2026-120002 Microsoft