CVE-2026-123391: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Published Nov 10, 2026

Updated

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Other sources

Microsoft Office SharePoint Elevation of Privilege Vulnerability

— Microsoft

Affected Software

1 affected component

Microsoft SharePoint

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must already be authorized to access the affected Microsoft SharePoint environment. Exploitation can be performed over the network and does not require user interaction.

What could successful exploitation allow?

Successful exploitation could allow an authorized attacker to elevate privileges in Microsoft SharePoint. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.

CVE-2026-123391: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could successful exploitation allow?