Veille CVE

Septembre 2026

16 CVE

Critique 0 Élevée 9 Moyenne 6 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft SharePoint Server Subscription Edition » ✕
  1. CVE-2026-69904 3.5 Faible

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  2. CVE-2026-69804 7.5 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  3. CVE-2026-69724 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  4. CVE-2026-69716 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  5. CVE-2026-69690 5.4 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  6. CVE-2026-69683 7.7 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  7. CVE-2026-69636 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  8. CVE-2026-69615 4.8 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  9. CVE-2026-69465 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  10. CVE-2026-69464 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  11. CVE-2026-69417 5.4 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  12. CVE-2026-69409 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  13. CVE-2026-69402 5.4 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  14. CVE-2026-69282 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  15. CVE-2026-69273 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  16. CVE-2026-69268 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.