CVE-2026-70251: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Published Oct 13, 2026
·Updated
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Other sources
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft SharePoint Server Subscription Edition<16.0.20326.20190
16.0.20326.20190
Microsoft SharePoint
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20190Patch KB5002927
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverity
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must be authorized and have low-level privileges. Exploitation is possible over the network and does not require user interaction.
2
How difficult is exploitation expected to be?
The attack complexity is rated high, indicating that exploitation requires conditions beyond basic network access and low privileges.
3
What could a successful exploit affect?
The vulnerability is rated as having high potential impact to confidentiality, integrity, and availability.