CVE-2026-55052: Microsoft SharePoint Elevation of Privilege Vulnerability
Published Jul 14, 2026
·Updated
Microsoft SharePoint Elevation of Privilege Vulnerability
Other sources
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
— Microsoft
Affected Software
6 affected componentsFixes available
Microsoft SharePoint Enterprise Server 2016<16.0.5561.1001
16.0.5561.1001
Microsoft SharePoint Server Subscription Edition<16.0.19725.20434
16.0.19725.20434
Microsoft SharePoint Server 2019<16.0.10417.20175
16.0.10417.20175
Microsoft SharePoint Server<16.0.19725.20434
Microsoft SharePoint Server=2016
Microsoft SharePoint Server=2019
Remediation
Event History
Jul 14, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:09 PM
Data Sourced
via MITRE·05:09 PM
DescriptionSeverity
Data Sourced
via NVD·06:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-55052?
The severity of CVE-2026-55052 is rated high with a score of 8.8.
2
How do I fix CVE-2026-55052?
To fix CVE-2026-55052, apply the available patch from Microsoft for SharePoint.
3
What products are affected by CVE-2026-55052?
CVE-2026-55052 affects Microsoft SharePoint Server, SharePoint Enterprise Server 2016, SharePoint Server Subscription Edition, and SharePoint Server 2019.
4
What type of vulnerability is CVE-2026-55052?
CVE-2026-55052 is an elevation of privilege vulnerability due to missing authorization in Microsoft SharePoint.
5
Can an attacker exploit CVE-2026-55052 remotely?
Yes, an authorized attacker can exploit CVE-2026-55052 remotely over a network.