CVE-2026-120002

Microsoft SharePoint Server Subscription Edition

Medium priority: severe, but no known exploitation

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

In the news