CVE-2026-65660
Microsoft · Published August 11, 2026
6.5
CVSS v3.1
MEDIUMPatch availableGet patch
Description
Microsoft SharePoint Server Spoofing Vulnerability. Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Affected Products
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C