WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product poi✕
Overview 2,427 matches · 131 in Waratek scope · 39 protected · 96 exploited · 56 CISA KEV · 204 public PoC · 115 EPSS ≥ 0.5
2,427matches 131in Waratek scope5.4% 39protected1.6% 96exploited4.0% 56CISA KEV2.3% 204public PoC8.4% 115EPSS ≥ 0.54.7%
Protected by Waratek 40 1.6% Rule in development 0 0.0% Mitigation candidate 11 0.5% No exploit published 80 3.3% Outside Waratek scope 19 0.8% Not applicable 2,277 93.8% Withdrawn CVE 0 0.0%
Critical 197 8.1% High 1,227 50.6% Medium 930 38.3% Low 73 3.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 39 1.6% partly blocked 1 0.0% not blocked 2,387 98.4% not established 0 0.0% unrecorded 0 0.0%
Exploited 96 4.0% Working exploit published 129 5.3% Proof of concept only 155 6.4% Forecast only 35 1.4% No public exploit 2,012 82.9%
split by peak 291 / year
Not applicable: 2,277Outside Waratek scope: 19No exploit published: 80Mitigation candidate: 11Protected by Waratek: 40 Low: 73Medium: 930High: 1,227Critical: 197 not blocked: 2,387partly blocked: 1blocked by ARMR today: 39 No public exploit: 2,012Forecast only: 35Proof of concept only: 155Working exploit published: 129Exploited: 96
19992 Not applicable2 High1 Medium1 not blocked2 No public exploit2 20005 Not applicable5 High4 Medium1 not blocked5 Working exploit published1 No public exploit4 20016 Not applicable6 High2 Medium2 Low2 not blocked6 No public exploit6 200212 Not applicable12 High8 Medium3 Low1 not blocked12 Working exploit published2 No public exploit10 20033 Not applicable3 High1 Medium2 not blocked3 Working exploit published1 No public exploit2 200410 Not applicable10 High5 Medium5 not blocked10 Working exploit published3 No public exploit7 20058 Outside Waratek scope1 Not applicable7 High4 Medium3 Low1 not blocked8 Working exploit published2 No public exploit6 200623 Not applicable23 High8 Medium14 Low1 not blocked23 Exploited1 Working exploit published10 No public exploit12 200714 Not applicable14 High11 Medium2 Low1 not blocked14 Exploited1 Working exploit published3 No public exploit10 200822 Not applicable22 High14 Medium7 Low1 not blocked22 Working exploit published4 No public exploit18 200952 Not applicable52 High48 Medium3 Low1 not blocked52 Exploited6 Working exploit published6 No public exploit40 201037 Not applicable37 High26 Medium9 Low2 not blocked37 Exploited2 Working exploit published9 Forecast only1 No public exploit25 201133 Not applicable33 High23 Medium10 not blocked33 Exploited1 Working exploit published2 No public exploit30 201240 No exploit published1 Not applicable39 High9 Medium31 not blocked40 Exploited3 Working exploit published3 Forecast only8 No public exploit26 201336 Not applicable36 High15 Medium15 Low6 not blocked36 Exploited2 Working exploit published3 Forecast only2 No public exploit29 201440 Protected by Waratek1 No exploit published1 Not applicable38 High15 Medium20 Low5 blocked by ARMR today1 not blocked39 Exploited3 Working exploit published4 No public exploit33 201580 No exploit published1 Not applicable79 High41 Medium31 Low8 not blocked80 Exploited2 Working exploit published10 No public exploit68 201674 Protected by Waratek1 No exploit published1 Not applicable72 Critical2 High49 Medium22 Low1 blocked by ARMR today1 not blocked73 Working exploit published13 Forecast only1 No public exploit60 201788 Protected by Waratek2 No exploit published6 Not applicable80 Critical5 High36 Medium46 Low1 blocked by ARMR today1 partly blocked1 not blocked86 Exploited3 Working exploit published9 No public exploit76 2018187 Protected by Waratek6 No exploit published14 Outside Waratek scope2 Not applicable165 Critical13 High81 Medium87 Low6 blocked by ARMR today6 not blocked181 Exploited4 Working exploit published10 Proof of concept only1 Forecast only2 No public exploit170 2019151 Protected by Waratek10 No exploit published9 Outside Waratek scope11 Not applicable121 Critical16 High61 Medium72 Low2 blocked by ARMR today10 not blocked141 Exploited6 Working exploit published5 Proof of concept only4 Forecast only1 No public exploit135 2020282 Protected by Waratek5 Mitigation candidate5 No exploit published14 Outside Waratek scope3 Not applicable255 Critical19 High138 Medium118 Low7 blocked by ARMR today5 not blocked277 Exploited4 Working exploit published8 Proof of concept only9 Forecast only1 No public exploit260 2021189 Protected by Waratek12 Mitigation candidate6 No exploit published27 Outside Waratek scope2 Not applicable142 Critical18 High103 Medium67 Low1 blocked by ARMR today12 not blocked177 Exploited9 Working exploit published14 Proof of concept only3 Forecast only4 No public exploit159 2022156 Protected by Waratek3 No exploit published1 Not applicable152 Critical24 High78 Medium52 Low2 blocked by ARMR today3 not blocked153 Exploited6 Proof of concept only6 Forecast only4 No public exploit140 2023175 No exploit published1 Not applicable174 Critical22 High86 Medium65 Low2 not blocked175 Exploited8 Working exploit published3 Proof of concept only21 Forecast only1 No public exploit142 2024185 Not applicable185 Critical34 High98 Medium53 not blocked185 Exploited10 Proof of concept only21 Forecast only9 No public exploit145 2025226 No exploit published2 Not applicable224 Critical20 High107 Medium86 Low13 not blocked226 Exploited11 Working exploit published4 Proof of concept only69 Forecast only1 No public exploit141 2026291 No exploit published2 Not applicable289 Critical24 High155 Medium103 Low9 not blocked291 Exploited14 Proof of concept only21 No public exploit256
1999200220052008201120142017202020232026
2,427 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 25 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-108452 High 2026-10-15 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88164 High 2026-10-14 Not applicable No public exploit Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-97783 High 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-97782 Medium 2026-10-13 Not applicable No public exploit Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-97755 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-96044 High 2026-10-13 Not applicable No public exploit No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88209 Medium 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88208 Medium 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88206 High 2026-10-13 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88204 High 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88200 High 2026-10-13 Not applicable No public exploit Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88198 High 2026-10-13 Not applicable No public exploit Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88166 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88163 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88155 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-85932 Medium 2026-10-13 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-85900 High 2026-10-13 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70298 Medium 2026-10-13 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70267 High 2026-10-13 Not applicable No public exploit Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70266 High 2026-10-13 Not applicable No public exploit Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70259 Medium 2026-10-13 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70251 High 2026-10-13 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70246 High 2026-10-13 Not applicable No public exploit Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70217 Medium 2026-10-13 Not applicable No public exploit Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70202 High 2026-10-13 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69943 High 2026-10-13 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-105720 Medium 2026-10-13 Not applicable No public exploit Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-105719 Medium 2026-10-13 Not applicable No public exploit Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-105713 Medium 2026-10-13 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2026-105013 High 2026-10-13 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-102866 High 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-102865 Medium 2026-10-13 Not applicable No public exploit Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-102864 Medium 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-102863 High 2026-10-13 Not applicable No public exploit Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102862 High 2026-10-13 Not applicable No public exploit Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102861 High 2026-10-13 Not applicable No public exploit Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102860 High 2026-10-13 Not applicable No public exploit Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102859 Medium 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-25274 Medium 2026-10-06 Not applicable No public exploit Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
CVE-2026-25267 High 2026-10-06 Not applicable No public exploit Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263 Medium 2026-10-06 Not applicable No public exploit Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2026-13043 Critical 2026-10-01 Not applicable No public exploit A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.
CVE-2026-25275 High 2026-09-17 Not applicable No public exploit Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-24075 High 2026-09-17 Not applicable No public exploit Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
CVE-2026-78513 Medium 2026-09-08 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-72977 Medium 2026-09-08 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72975 Medium 2026-09-08 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-69904 Low 2026-09-08 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69804 High 2026-09-08 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69797 High 2026-09-08 Not applicable No public exploit Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69767 High 2026-09-08 Not applicable No public exploit Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69724 High 2026-09-08 Not applicable No public exploit Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69716 High 2026-09-08 Not applicable No public exploit Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69690 Medium 2026-09-08 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69683 High 2026-09-08 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69678 High 2026-09-08 Not applicable No public exploit Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69636 Medium 2026-09-08 Not applicable No public exploit Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69615 Medium 2026-09-08 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69465 High 2026-09-08 Not applicable No public exploit Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69464 High 2026-09-08 Not applicable No public exploit Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69417 High 2026-09-08 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69409 Medium 2026-09-08 Not applicable No public exploit Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69402 High 2026-09-08 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69282 High 2026-09-08 Not applicable No public exploit Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69273 High 2026-09-08 Not applicable No public exploit Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69268 High 2026-09-08 Not applicable No public exploit Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-18851 High 2026-09-08 Not applicable No public exploit Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin.
CVE-2025-36939 Critical 2026-08-24 Not applicable No public exploit Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.
CVE-2026-70355 High 2026-08-11 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70326 High 2026-08-11 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70324 High 2026-08-11 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70321 High 2026-08-11 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70306 Critical 2026-08-11 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-68809 Medium 2026-08-11 Not applicable No public exploit Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-66808 High 2026-08-11 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-66805 High 2026-08-11 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65665 High 2026-08-11 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65663 High 2026-08-11 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65660 High 2026-08-11 Not applicable Exploited Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65658 High 2026-08-11 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-64922 Medium 2026-08-11 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64921 High 2026-08-11 Not applicable No public exploit Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-64916 Medium 2026-08-11 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64902 Medium 2026-08-11 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64901 High 2026-08-11 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-64900 High 2026-08-11 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64897 Medium 2026-08-11 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-63520 High 2026-08-11 Not applicable Exploited Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVE-2026-63516 Medium 2026-08-11 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-63514 High 2026-08-11 Not applicable No public exploit Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-63512 Medium 2026-08-11 Not applicable No public exploit Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-62917 Medium 2026-08-11 Not applicable No public exploit Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62839 Medium 2026-08-11 Not applicable No public exploit Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62837 Medium 2026-08-11 Not applicable No public exploit Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-62829 Medium 2026-08-11 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62827 High 2026-08-11 Not applicable No public exploit Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-58639 Medium 2026-08-11 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-57105 High 2026-08-11 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-54123 Medium 2026-08-11 Not applicable No public exploit Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
CVE-2026-70332 Critical 2026-08-07 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
‹ prev page 1 of 25 next ›