ByteOS Network

CVE Vulnerability Details :

CVE-2026-45467

PUBLISHED

More Info Official Page

Assigner-microsoft

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-09 Jun, 2026 | 17:04

Updated At-09 Jun, 2026 | 21:49

▼CVE Numbering Authority (CNA)

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected Products

Vendor

Microsoft Corporation

Product

Microsoft SharePoint Enterprise Server 2016

Platforms

x64-based Systems

Versions

Affected

From 16.0.0 before 16.0.5556.1005 (custom)

Vendor

Microsoft Corporation

Product

Microsoft SharePoint Server 2019

Platforms

x64-based Systems

Versions

Affected

From 16.0.0 before 16.0.10417.20153 (custom)

Vendor

Microsoft Corporation

Product

Microsoft SharePoint Server Subscription Edition

Platforms

x64-based Systems

Versions

Affected

From 16.0.0 before 16.0.19725.20384 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-79	CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Type: CWE

CWE ID: CWE-79

Description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Metrics

Version	Base score	Base severity	Vector
3.1	4.6	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Version: 3.1

Base score: 4.6

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

References

Hyperlink	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45467	vendor-advisory patch

Hyperlink: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45467

Resource:

vendor-advisory

patch

Affected Products

Affected

Affected

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References