CVE Catalog
CVE-2026-70306
CriticalCVSS 9.3Exploitation Probability (EPSS)
Elevated risk0.73%
51th percentile - higher than 51% of all known CVEs
Summary
A cross-site scripting vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Risk Assessment
An attacker can impersonate trusted content, potentially leading to data theft or fraud.
Recommendation
Install security updates for Microsoft Office SharePoint and consider strengthening content security policies.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.