Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-47634: Microsoft Office SharePoint Spoofing Risk

CVE-2026-47634 · published 4 months ago

Summary

An authorized attacker can trick users into performing actions they shouldn't, by injecting malicious code into SharePoint pages. This is a concern because it can lead to sensitive information being shared or actions being taken that might not be intended. To mitigate this risk, ensure SharePoint is up to date with the latest security patches and configure it to restrict user permissions and input validation.

What to do

Update microsoft sharepoint_server to version 16.0.19725.20384 or later.
Update microsoft microsoft sharepoint server 2019 to version 16.0.10417.20153 or later.
Update microsoft microsoft sharepoint server subscription edition to version 16.0.19725.20384 or later.

Affected software

Vendor	Product	Affected versions
microsoft	sharepoint_server	< 16.0.19725.20384 2019 `cpe:2.3:a:microsoft:sharepoint_server:::::subscription:::*`
microsoft	microsoft sharepoint server 2019	< 16.0.10417.20153
microsoft	microsoft sharepoint server subscription edition	< 16.0.19725.20384

Original advisory text

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47634 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

5.4 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-74Injection

CWE-79Cross-site Scripting (XSS)

Timeline

Published9 Jun 2026

Updated4 Nov 2026

First seen10 Jun 2026

Sources

CVE-2026-47634 · NVD

CVE-2026-47634 · MITRE

Track software like this

Free during beta