Vulnerabilities
CVE-2026-105720: SharePoint Elevation of Privilege Vulnerability
A flaw in Microsoft Office SharePoint’s authorization logic lets an authenticated user gain higher privileges on the network. The issue affects all SharePoint deployments that have not applied the latest security update. Apply the patch immediately and audit user permissions.
What Happened
Microsoft Office SharePoint contains an incorrect authorization check that can be exploited by an authenticated user to elevate their privileges on the network.
Impact
Authorized users can gain elevated rights, potentially accessing sensitive data or executing privileged actions beyond their intended scope. The vulnerability is exploitable in on‑premises and cloud‑based SharePoint environments.
Mitigation
- Install the latest security update released by Microsoft for SharePoint.
- Verify that the update is applied to all SharePoint servers and tenant configurations.
- Review and tighten role‑based access controls, ensuring least‑privilege principles.
- Disable any legacy authentication methods that may bypass the updated checks.
Monitoring & Response
“If an attacker gains elevated privileges, they can move laterally and exfiltrate data.”
Enable audit logging for privilege changes, monitor for anomalous activity, and conduct a rapid incident response if suspicious elevation is detected.
Related vulnerabilities
CVE-2026-102862: SharePoint Elevation of Privilege Vulnerability
Microsoft Office SharePoint is vulnerable to an elevation of privilege flaw (CVE‑2026‑102862) that allows an authenticated attacker to gain higher permissions on a network. The flaw affects SharePoint Server 2013/2016/2019 and SharePoint Online. Defenders should apply the latest cumulative update, audit permissions, and monitor for unauthorized privilege changes.
Read briefing
CVE-2026-102866: SharePoint Elevation of Privilege via Signature Bypass
Microsoft Office SharePoint is vulnerable to an elevation of privilege flaw that allows an attacker to bypass cryptographic signature verification and gain elevated rights over the network. The flaw is identified as CVE-2026-102866 and affects all versions of SharePoint that rely on Office cryptographic validation. Defenders should apply the latest Microsoft security update, verify signature checks, and monitor for suspicious privilege changes.
Read briefing
Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVE-2026-96044) – Immediate Patch Required
Microsoft Office SharePoint is affected by CVE-2026-96044, an elevation of privilege flaw that can allow local users to gain higher privileges. Microsoft has released a patch. Defenders should apply the update immediately, verify patch status, and monitor for suspicious activity.
Read briefing
CVE-2026-102860: SharePoint Elevation of Privilege via Improper Access Control
Microsoft Office SharePoint contains an access‑control flaw that permits an authenticated user to elevate privileges across the network. The vulnerability, identified as CVE‑2026‑102860, could allow attackers to gain higher‑level permissions within SharePoint environments. Defenders should verify patch status, restrict privileged access, and monitor for anomalous privilege changes.
Read briefing