Veille CVE

Mardi 13 octobre 2026

2 CVE

  1. CVE-2026-97783 6.1 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  2. CVE-2026-97755 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.