{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft SharePoint Server Subscription Edition: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--microsoft-sharepoint-server-subscription-edition/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--microsoft-sharepoint-server-subscription-edition/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-108452/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-108452/",
   "title": "CVE-2026-108452 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-15T20:57:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88164/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88164/",
   "title": "CVE-2026-88164 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-14T17:50:07Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105013/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105013/",
   "title": "CVE-2026-105013 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96044/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96044/",
   "title": "CVE-2026-96044 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88206/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88206/",
   "title": "CVE-2026-88206 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88200/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88200/",
   "title": "CVE-2026-88200 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88166/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88166/",
   "title": "CVE-2026-88166 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88163/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88163/",
   "title": "CVE-2026-88163 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70246/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70246/",
   "title": "CVE-2026-70246 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70202/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70202/",
   "title": "CVE-2026-70202 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:12Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97783/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97783/",
   "title": "CVE-2026-97783 · Microsoft SharePoint Enterprise Server 2016 · disclosed",
   "content_text": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.",
   "date_published": "2026-10-13T19:00:38Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97755/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97755/",
   "title": "CVE-2026-97755 · Microsoft 365 Apps for Enterprise · disclosed",
   "content_text": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:00:38Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88204/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88204/",
   "title": "CVE-2026-88204 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.",
   "date_published": "2026-10-13T19:00:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88198/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88198/",
   "title": "CVE-2026-88198 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:00:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88155/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88155/",
   "title": "CVE-2026-88155 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:00:29Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85900/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85900/",
   "title": "CVE-2026-85900 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:00:29Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70266/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70266/",
   "title": "CVE-2026-70266 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:00:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70251/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70251/",
   "title": "CVE-2026-70251 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:00:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70267/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70267/",
   "title": "CVE-2026-70267 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:00:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-69943/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-69943/",
   "title": "CVE-2026-69943 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:00:12Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102866/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102866/",
   "title": "CVE-2026-102866 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T18:59:29Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102863/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102863/",
   "title": "CVE-2026-102863 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T18:59:29Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102862/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102862/",
   "title": "CVE-2026-102862 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T18:59:29Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102861/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102861/",
   "title": "CVE-2026-102861 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T18:59:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102860/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102860/",
   "title": "CVE-2026-102860 · Microsoft SharePoint Server Subscription Edition · disclosed",
   "content_text": "Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T18:59:28Z"
  }
 ]
}