CVE-2026-102866: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Published Oct 13, 2026
·Updated
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
Other sources
Microsoft Office SharePoint Elevation of Privilege Vulnerability
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft SharePoint
Microsoft SharePoint Server Subscription Edition<16.0.20326.20190
16.0.20326.20190
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20190Patch KB5002927
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·06:59 PM
Data Sourced
via MITRE·06:59 PM
DescriptionSeverity
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access would an attacker need to attempt exploitation?
The attack vector is network-based and requires no privileges or user interaction. Exploitation is rated high complexity.
2
Which SharePoint products are identified as affected?
The affected software list identifies Microsoft SharePoint and Microsoft SharePoint Server Subscription Edition.