CVE-2026-120002
Microsoft SharePoint Server Subscription Edition privilege escalation via incorrect authorization checks
critical · 9.9
Fix listed
Microsoft SharePoint Server Subscription Edition
Published
Description
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Reported fixed versions
16.0.20326.20278
Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.