| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.
Known vulnerabilities affecting Sharepoint products and systems
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-97783 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 6.1 |
| 272 |
| Neutral |
| No |
| Yes |
| CVE-2026-97782 | Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. | 6.8 | 253 | Neutral | No | Yes |
| CVE-2026-97755 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 8.8 | 630 | Neutral | No | Yes |
| CVE-2026-96044 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 545 | Neutral | No | Yes |
| CVE-2026-88209 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 4.6 | 203 | Neutral | No | Yes |
| CVE-2026-88208 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 4.6 | 203 | Neutral | No | Yes |
| CVE-2026-88206 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 7.5 | 508 | Neutral | No | Yes |
| CVE-2026-88204 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 7.3 | 443 | Neutral | No | Yes |
| CVE-2026-88200 | Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 545 | Neutral | No | Yes |
| CVE-2026-88198 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 609 | Neutral | No | Yes |
| CVE-2026-88166 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 545 | Neutral | No | Yes |
| CVE-2026-88163 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 545 | Neutral | No | Yes |
| CVE-2026-88155 | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 545 | Neutral | No | Yes |
| CVE-2026-85932 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 6.5 | 331 | Neutral | No | Yes |
| CVE-2026-85900 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 673 | Neutral | No | Yes |
| CVE-2026-70355 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.7 | 640 | Neutral | No | Yes |
| CVE-2026-70332 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 9.6 | 706 | Neutral | No | Yes |
| CVE-2026-70326 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 673 | Neutral | No | Yes |
| CVE-2026-70324 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 8.8 | 673 | Neutral | No | Yes |
| CVE-2026-70321 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 8.8 | 673 | Neutral | No | Yes |