CVE-2026-88198: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Other sources
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.20326.20190Patch KB5002927
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already be authorized to access the affected Microsoft SharePoint Server Subscription Edition deployment. Exploitation can occur over the network and does not require user interaction.
What security impact could successful exploitation have?
The vulnerability allows an authorized attacker to elevate privileges. The provided severity vector indicates potential high impact to confidentiality, integrity, and availability.
Is there a known workaround if patching cannot be performed immediately?
No workaround or mitigation is provided in the available information. Prioritize restricting SharePoint access to authorized users and review privileges for existing accounts.