CVE-2026-88166
CVE-2026-88166 · Microsoft Office SharePoint Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 8.8 · High · EPSS 0.8% · Fix available
- Published
- Updated
Affected products and versions
microsoft sharepoint server subscription edition
- Versions
- ≥ 16.0.0, < 16.0.20326.20190: Affected (custom)
Update to 16.0.20326.20190