CVE-2026-108452High· 8.8▾ TwilightImproper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
sharepoint_server_subscription_edition >= 16.0.0 < 16.0.20326.20190Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2021-40444High· 8.8Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows
CVE-2026-88164High· 8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70321High· 8.8Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-70326High· 8.8Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2021-27065High· 7.8Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2024-21400Critical· 9.0Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability