CVE-2026-97782: Microsoft Office SharePoint Tampering Vulnerability
Published Oct 13, 2026
·Updated
Microsoft Office SharePoint Tampering Vulnerability
Other sources
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
— Microsoft
Affected Software
1 affected component
Microsoft SharePoint Server Subscription Edition
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access and interaction does exploitation require?
An attacker must be authorized and have low-level privileges, and must be able to reach the affected SharePoint environment over a network. No user interaction is required, but exploitation has high attack complexity.
2
What is the expected security impact?
Successful exploitation can result in tampering, with high potential impact to confidentiality and integrity. The available assessment indicates no impact to availability.