CVE-2026-96044

Modified Modified - Updated After Analysis

Privilege Escalation in Microsoft Office SharePoint

Publication date: 2026-10-13

Last updated on: 2026-10-16

Assigner: Microsoft Corporation

Description

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-96044

EUVD

EUVD-2026-100192

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	sharepoint_server	to 16.0.20326.20190 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1287	The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate their privileges over a network without a specific CWE assigned. This means an attacker with some access could gain higher-level permissions.

Impact Analysis

An attacker could exploit this to gain elevated access, potentially allowing them to read, modify, or delete sensitive data, install malicious software, or take control of affected systems.

Mitigation Strategies

Apply the latest security updates from Microsoft for SharePoint Server as soon as possible to address the elevation of privilege vulnerability.

Hi! I’m here to help you understand CVE-2026-96044. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70