CVE-2026-105720: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Other sources
Microsoft Office SharePoint Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20190Patch KB5002927
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already be authorized to access the affected SharePoint environment. The vulnerability is exploitable over the network and does not require user interaction.
What is the likely impact of successful exploitation?
Successful exploitation allows an authorized attacker to elevate privileges. The provided severity data indicates an integrity impact, with no stated confidentiality or availability impact.
Which products are identified as affected?
The affected software listed is Microsoft SharePoint and Microsoft SharePoint Server Subscription Edition.