CVE-2026-102860: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Other sources
Microsoft Office SharePoint Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20190Patch KB5002927
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already be authorized to access the affected SharePoint Server Subscription Edition environment. Exploitation can be performed over the network and does not require user interaction.
What level of impact could successful exploitation have?
Successful exploitation allows elevation of privilege. The supplied severity vector indicates high impact to confidentiality, integrity, and availability.
Is SharePoint Server Subscription Edition the affected product?
The affected software listed is Microsoft SharePoint Server Subscription Edition.