<< Back
CVE Number Vulnerability Product Severity Date
CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability Microsoft SharePoint Critical 01-09-2026

Technical Information

An unauthenticated attacker can exploit a cross-site scripting (XSS) vulnerability caused by improper neutralization of user input over a network, potentially enabling spoofing and execution of malicious scripts in a victim’s browser.

Patch release date: Aug 11, 2026
Further information on this vulnerability is available at : CVE-2026-70332

Affected Software

Microsoft SharePoint Online