Vulnerabilities
Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVE-2026-96044) – Immediate Patch Required
Microsoft Office SharePoint is affected by CVE-2026-96044, an elevation of privilege flaw that can allow local users to gain higher privileges. Microsoft has released a patch. Defenders should apply the update immediately, verify patch status, and monitor for suspicious activity.
What happened
Microsoft Office SharePoint has a flaw identified as CVE-2026-96044 that permits an elevation of privilege attack. The vulnerability can be exploited by a local user to gain higher access rights within the SharePoint environment.
Impact
Unauthenticated or local users could potentially elevate privileges to perform actions normally restricted to administrators. This could lead to unauthorized data access, configuration changes, or persistence mechanisms.
What to do
- Verify that the latest security update for Microsoft Office SharePoint is installed on all servers and client machines.
- Run the Microsoft Security Update Guide or use WSUS/Intune to push the patch across the environment.
- Confirm patch deployment by checking the installed update list or using PowerShell cmdlets such as Get-HotFix.
- Restrict local user permissions to the minimum required for their role.
- Monitor event logs for unusual privilege escalation events and review audit trails for changes to SharePoint configuration.
Related vulnerabilities
CVE-2026-102862: SharePoint Elevation of Privilege Vulnerability
Microsoft Office SharePoint is vulnerable to an elevation of privilege flaw (CVE‑2026‑102862) that allows an authenticated attacker to gain higher permissions on a network. The flaw affects SharePoint Server 2013/2016/2019 and SharePoint Online. Defenders should apply the latest cumulative update, audit permissions, and monitor for unauthorized privilege changes.
Read briefing
CVE-2026-105720: SharePoint Elevation of Privilege Vulnerability
A flaw in Microsoft Office SharePoint’s authorization logic lets an authenticated user gain higher privileges on the network. The issue affects all SharePoint deployments that have not applied the latest security update. Apply the patch immediately and audit user permissions.
Read briefing
CVE-2026-102866: SharePoint Elevation of Privilege via Signature Bypass
Microsoft Office SharePoint is vulnerable to an elevation of privilege flaw that allows an attacker to bypass cryptographic signature verification and gain elevated rights over the network. The flaw is identified as CVE-2026-102866 and affects all versions of SharePoint that rely on Office cryptographic validation. Defenders should apply the latest Microsoft security update, verify signature checks, and monitor for suspicious privilege changes.
Read briefing
CVE-2026-102860: SharePoint Elevation of Privilege via Improper Access Control
Microsoft Office SharePoint contains an access‑control flaw that permits an authenticated user to elevate privileges across the network. The vulnerability, identified as CVE‑2026‑102860, could allow attackers to gain higher‑level permissions within SharePoint environments. Defenders should verify patch status, restrict privileged access, and monitor for anomalous privilege changes.
Read briefing