CVE-2026-120002

Microsoft SharePoint Server Subscription Edition

Published 10 Nov 2026 · updated 10 Nov 2026 · Awaiting Analysis

9.9 Critical · CVSS 3.1, microsoft.com

Description

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

References