rootpwn

critical · CVSS v3 8.8

CVE-2026-108452

Microsoft Office SharePoint is vulnerable to a path traversal flaw that can be exploited by authorized users to execute arbitrary code over

Overview

Microsoft Office SharePoint is vulnerable to a path traversal flaw that can be exploited by authorized users to execute arbitrary code over the network. This flaw allows attackers to bypass directory restrictions and run malicious payloads. The vulnerability is rated critical with a CVSS score of 8.8.

Description

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Impact

The vulnerability compromises confidentiality, integrity, and availability of SharePoint data and services. Authorized users can execute arbitrary code, potentially leading to data exfiltration, ransomware, or further lateral movement. Organizations that host SharePoint sites are directly impacted, especially those with permissive file upload settings.

Remediation

Apply the latest Microsoft security update for SharePoint that removes the path traversal flaw. Ensure that file upload directories are strictly confined and validate all file paths on the server side. Enforce least privilege for SharePoint service accounts and monitor for anomalous file operations.

Risk context

Critical severity and a CVSS v3 score of 8.8 indicate a high likelihood of exploitation. Immediate patching is recommended to mitigate the risk of remote code execution. No EPSS data available, but the critical rating warrants urgent attention.

Affected products

  • Microsoft SharePoint

Scores

Severity
critical
CVSS v2
9
CVSS v3
8.8
CVSS v4
—
EPSS
—

path-traversal sharepoint critical code-execution authorization defense

← All CVEs

Related CVEs

critical

CVE-2026-108442

Microsoft Office Word contains a use‑after‑free vulnerability that can be triggered over a network, enabling an attacker to execute arbitrary code. The flaw is critical and can compromise any system running affected Word versions. It is a high‑risk threat for organizations that rely on Office for document processing.

View analysis

critical

CVE-2026-108443

An off‑by‑one bug in Microsoft Office Word can be triggered over a network, enabling an attacker to execute arbitrary code. The flaw exists in the document parsing logic and can be exploited remotely without user interaction. It poses a critical threat to any environment running vulnerable Word versions.

View analysis

critical

CVE-2026-108444

A heap-based buffer overflow in Microsoft Office can be triggered over a network, allowing an attacker to execute arbitrary code. The flaw exists in multiple Office versions and can be exploited by unauthenticated users. It poses a significant threat to organizations using Office on networked environments.

View analysis

critical

CVE-2026-108445

Microsoft Office Word has a stack-based buffer overflow that can be triggered via a crafted document over a network. An attacker can execute arbitrary code without user interaction. This flaw is critical and can compromise any system running vulnerable Word versions.

View analysis