Veille CVE

Octobre 2026

38 CVE

Critique 0 Élevée 24 Moyenne 14 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft sharepoint server » ✕
  1. CVE-2026-108452 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  2. CVE-2026-88164 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  3. CVE-2026-97783 6.1 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  4. CVE-2026-97782 6.8 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

  5. CVE-2026-97755 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-96044 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  7. CVE-2026-88209 4.6 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  8. CVE-2026-88208 4.6 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  9. CVE-2026-88206 7.5 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  10. CVE-2026-88204 7.3 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  11. CVE-2026-88200 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  12. CVE-2026-88198 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  13. CVE-2026-88166 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  14. CVE-2026-88163 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  15. CVE-2026-88155 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  16. CVE-2026-85932 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  17. CVE-2026-85900 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  18. CVE-2026-70298 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  19. CVE-2026-70267 7.2 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  20. CVE-2026-70266 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  21. CVE-2026-70259 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  22. CVE-2026-70251 7.5 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  23. CVE-2026-70246 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  24. CVE-2026-70217 4.9 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  25. CVE-2026-70202 7.5 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  26. CVE-2026-69943 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  27. CVE-2026-105720 4.3 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  28. CVE-2026-105719 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  29. CVE-2026-105713 5.7 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

  30. CVE-2026-105013 7.4 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  31. CVE-2026-102866 8.1 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

  32. CVE-2026-102865 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  33. CVE-2026-102864 4.6 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  34. CVE-2026-102863 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  35. CVE-2026-102862 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  36. CVE-2026-102861 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  37. CVE-2026-102860 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  38. CVE-2026-102859 4.6 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.