Vulnerabilities
Privilege Escalation in Microsoft SharePoint Server Subscription Edition – CVE-2026-88164
A privilege‑escalation flaw (CVE‑2026‑88164) affects Microsoft SharePoint Server Subscription Edition versions prior to 16.0.20326.20190. Attackers can gain elevated rights on the server. Apply the Microsoft patch and verify configuration to prevent exploitation.
What happened
A vulnerability (CVE‑2026‑88164) was identified in Microsoft SharePoint Server Subscription Edition that allows an attacker to elevate privileges on the server.
Affected systems
- Microsoft SharePoint Server Subscription Edition
- Versions earlier than 16.0.20326.20190
Impact
Successful exploitation grants the attacker higher privileges, potentially enabling full control over the SharePoint environment and access to sensitive data.
Mitigation
Apply the latest Microsoft security update for SharePoint Server. Verify that the update has been installed on all affected instances. Review role‑based access controls and ensure least‑privilege principles are enforced.
Next steps
Conduct a rapid inventory of SharePoint servers, confirm patch status, and monitor for anomalous privilege‑escalation activity. Coordinate with Microsoft support if any issues arise during patch deployment.
Related vulnerabilities
CVE-2026-102862: SharePoint Elevation of Privilege Vulnerability
Microsoft Office SharePoint is vulnerable to an elevation of privilege flaw (CVE‑2026‑102862) that allows an authenticated attacker to gain higher permissions on a network. The flaw affects SharePoint Server 2013/2016/2019 and SharePoint Online. Defenders should apply the latest cumulative update, audit permissions, and monitor for unauthorized privilege changes.
Read briefing
Microsoft Office SharePoint SSRF Spoofing Vulnerability (CVE-2026-105713)
A server‑side request forgery flaw in Microsoft Office SharePoint can let an authenticated user spoof requests to adjacent networks. The issue is rated critical and affects all SharePoint deployments. Apply the latest patch and tighten network controls immediately.
Read briefing
Microsoft SharePoint Server Spoofing Vulnerability (CVE-2026-63516) Acknowledged
Microsoft has acknowledged a spoofing vulnerability in SharePoint Server (CVE-2026-63516). The issue could allow attackers to impersonate legitimate users or services. Defenders should verify if their SharePoint deployments are affected and apply any forthcoming patches or mitigations.
Read briefing
CVE-2026-62874: Azure Billing Privilege Escalation Vulnerability
A flaw in Azure Billing data validation allows attackers to gain elevated privileges within an Azure subscription. The issue can be exploited without authentication, potentially giving attackers full control over billing and resource management. Defenders should apply the latest Azure updates, restrict billing API access, and monitor for anomalous billing activity.
Read briefing