Cross-Site Scripting Vulnerability in Microsoft Office SharePoint
CVE-2026-88208

4.6MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Sharepoint Server Subscription Edition
Vendor
CVE Published:
13 October 2026

What is CVE-2026-88208?

A vulnerability in Microsoft Office SharePoint permits an authorized attacker to exploit improper input handling during web page generation. This security flaw can be leveraged to execute cross-site scripting attacks, potentially leading to spoofing over the network. It is important for users to be aware of this vulnerability and apply necessary patches to mitigate the risks associated with exploitation.

Affected Version(s)

Microsoft SharePoint Server Subscription Edition x64-based Systems 16.0.0 < 16.0.20326.20190

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.