Improper Authorization in Microsoft Office SharePoint
CVE-2026-120002
9.9CRITICAL
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 10 November 2026
What is CVE-2026-120002?
An improper authorization vulnerability in Microsoft Office SharePoint can allow an authorized attacker to gain elevated privileges over a network. This flaw could enable malicious users to exploit certain access controls, leading to unauthorized actions that compromise the integrity and confidentiality of data processed by SharePoint. Organizations using affected versions of SharePoint should review their systems for potential exposure and apply the necessary security patches provided by Microsoft to mitigate this risk.
Affected Version(s)
Microsoft SharePoint Server Subscription Edition x64-based Systems 16.0.0 < 16.0.20326.20278