CVE-2026-110057: Microsoft Office SharePoint Information Disclosure Vulnerability

Q: Who can exploit this vulnerability?

An attacker must already be authorized in Microsoft SharePoint Server Subscription Edition and able to reach the affected SharePoint service over the network. No user interaction is required.

Q: What is the potential impact?

Successful exploitation can disclose information. The provided data does not indicate any integrity or availability impact.

Q: What does the attack require?

The vulnerability involves an authorization bypass through a user-controlled key. Exploitation has low attack complexity and requires low-level privileges.

Published Nov 10, 2026

Updated

Authorization bypass through user-controlled key in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Other sources

Microsoft Office SharePoint Information Disclosure Vulnerability

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft SharePoint Server Subscription Edition<16.0.20326.20278

16.0.20326.20278

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20278Patch KB5002945

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·04:00 PM

Affected Software

CVE Published

via MITRE·06:21 PM

Data Sourced

via MITRE·06:21 PM

DescriptionSeverity

Data Sourced

via NVD·07:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker must already be authorized in Microsoft SharePoint Server Subscription Edition and able to reach the affected SharePoint service over the network. No user interaction is required.

What is the potential impact?

Successful exploitation can disclose information. The provided data does not indicate any integrity or availability impact.

What does the attack require?

The vulnerability involves an authorization bypass through a user-controlled key. Exploitation has low attack complexity and requires low-level privileges.

CVE-2026-110057: Microsoft Office SharePoint Information Disclosure Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact?

What does the attack require?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact?

What does the attack require?