CVE Catalog
CVE-2026-70332
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.43%
36th percentile - higher than 36% of all known CVEs
Summary
Improper input neutralization during web page generation (cross-site scripting) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Risk Assessment
An attacker can spoof trusted content, potentially leading to data theft or malware distribution.
Recommendation
Apply security updates provided by Microsoft for SharePoint or implement protective measures such as input filtering.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.