CVE-2026-88163: Microsoft Office SharePoint Remote Code Execution Vulnerability
Published Oct 13, 2026
·Updated
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Other sources
Microsoft Office SharePoint Remote Code Execution Vulnerability
— Microsoft
Affected Software
1 affected componentFixes available
Microsoft SharePoint Server Subscription Edition<16.0.20326.20190
16.0.20326.20190
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20190Patch KB5002927
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:01 PM
Data Sourced
via MITRE·07:01 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authorized and have low-level privileges. No user interaction is required.
2
Can this be exploited remotely?
Yes. The vulnerability is exploitable over a network with low attack complexity.