CVE-2026-70217
CVE-2026-70217 · Microsoft Office SharePoint Information Disclosure Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVSS 4.9 · Medium · EPSS 0.9% · Fix available
- Published
- Updated
Affected products and versions
microsoft sharepoint server subscription edition
- Versions
- ≥ 16.0.0, < 16.0.20326.20190: Affected (custom)
Update to 16.0.20326.20190