CVE-2026-102865: Microsoft Office SharePoint Information Disclosure Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Other sources
Microsoft Office SharePoint Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20190Patch KB5002927
Event History
Frequently Asked Questions
Does an attacker need authenticated access to exploit this issue?
Yes. Exploitation requires an authorized attacker and can be performed over a network. The provided data does not specify the privilege level or type of account required.
What security impact is indicated by the severity vector?
The vector indicates high confidentiality impact, with no indicated integrity or availability impact. Exploitation does not require user interaction and has low attack complexity.
Which SharePoint products are listed as affected?
The affected software list includes Microsoft SharePoint Server Subscription Edition and Microsoft SharePoint.