CVE catalog
All CVEs

CVE-2026-120002

Microsoft SharePoint Server Subscription Edition privilege escalation via incorrect authorization checks

critical · 9.9
Fix listed

Microsoft SharePoint Server Subscription Edition

Published

Description

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Reported fixed versions

16.0.20326.20278

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.