EUVD-2026-73696
GHSA-8rcp-7mqq-6875
Severity by source
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
XSS executes in victim browser context warranting S:C; described impact is spoofing not confirmed session hijack, so C:L/I:L; PR:L confirmed by authenticated-only attack surface.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionNVD
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
AnalysisAI
Cross-site scripting in Microsoft SharePoint Server Subscription Edition (builds prior to 16.0.20326.20090) allows an authenticated low-privileged attacker to inject malicious scripts into SharePoint pages, enabling spoofing attacks against users who view the compromised content. The CVSS vector (PR:L/UI:R/C:H/I:H) indicates victim interaction is required and that impact may extend to session token exposure or impersonation within the SharePoint context. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) the attacker holds a valid, authenticated SharePoint account with at least low-level content authoring rights - PR:L per CVSS, ruling out fully unauthenticated external attackers; (2) the attacker can create or modify a SharePoint page, list item, web part, or other rendered content area that other users will view; (3) a victim user must actively navigate to or interact with the attacker-controlled SharePoint content - UI:R per CVSS, preventing automated or self-propagating exploitation. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.3 (High) score reflects the combination of network accessibility, high confidentiality and integrity impact, and low attacker privilege requirement. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patch bringing Microsoft SharePoint Server Subscription Edition to build 16.0.20326.20090 or later, available through the Microsoft Security Response Center at msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69417. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory your SharePoint Subscription Edition deployments and confirm whether any instances run builds prior to 16.0.20326.20090. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Sharepoint Server
View allMicrosoft SharePoint Server contains a deserialization vulnerability allowing unauthenticated remote code execution over
Microsoft Office SharePoint contains a code injection vulnerability (CVE-2025-49704, CVSS 8.8) enabling authenticated at
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a networ
Microsoft Word Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely e
Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 S
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office fo
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applica
The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attac
Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Off
Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 20
Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Ap
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today