CVE-2026-97783: Microsoft Office SharePoint Spoofing Vulnerability
Published Oct 13, 2026
·Updated
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Other sources
Microsoft Office SharePoint Spoofing Vulnerability
— Microsoft
Affected Software
1 affected component
Microsoft SharePoint Server 2019
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability is remotely reachable and does not require the attacker to be authenticated. Exploitation does require user interaction.
2
What security impact is indicated?
The issue is classified as spoofing and involves cross-site scripting during web page generation. The supplied severity vector indicates high impacts to confidentiality and integrity, with no availability impact.
3
Which product is identified as affected?
The provided affected software entry identifies Microsoft SharePoint Server 2019.