CVE-2026-105719: Microsoft SharePoint Server Information Disclosure Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Other sources
Microsoft SharePoint Server Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20190Patch KB5002927
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authorized to access the affected Microsoft SharePoint Server or SharePoint Server Subscription Edition instance. The attack can be performed over a network and does not require user interaction.
What is the potential impact?
Successful exploitation may allow disclosure of information. The provided severity vector indicates high confidentiality impact, with no indicated integrity or availability impact.
Is a default deployment known to be affected?
The available information identifies the affected products but does not state whether default configurations are vulnerable or identify any required configuration conditions.