CVE-2026-111300: Microsoft Office SharePoint Spoofing Vulnerability

Q: What level of access does an attacker need to exploit this issue?

The attacker must be authorized, meaning they need valid access to the affected SharePoint Server Subscription Edition environment. Exploitation is possible over the network and requires user interaction.

Q: What is the likely impact of successful exploitation?

Successful exploitation allows spoofing through a cross-site scripting condition. The supplied severity vector indicates potential high confidentiality and integrity impact, with no availability impact.

Q: Which product is identified as affected?

The affected product identified in the available data is Microsoft SharePoint Server Subscription Edition.

Published Nov 10, 2026

Updated

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Other sources

Microsoft Office SharePoint Spoofing Vulnerability

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft SharePoint Server Subscription Edition<16.0.20326.20278

16.0.20326.20278

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20278Patch KB5002945

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·04:00 PM

Affected Software

CVE Published

via MITRE·06:21 PM

Data Sourced

via MITRE·06:21 PM

DescriptionSeverity

Data Sourced

via NVD·07:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must be authorized, meaning they need valid access to the affected SharePoint Server Subscription Edition environment. Exploitation is possible over the network and requires user interaction.

What is the likely impact of successful exploitation?

Successful exploitation allows spoofing through a cross-site scripting condition. The supplied severity vector indicates potential high confidentiality and integrity impact, with no availability impact.

Which product is identified as affected?

The affected product identified in the available data is Microsoft SharePoint Server Subscription Edition.

CVE-2026-111300: Microsoft Office SharePoint Spoofing Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Which product is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Which product is identified as affected?