AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-64897

MEDIUM · CVSS 4.6 EPSS 0.41%

Source: NVD + CISA KEV + EPSS · Published 2026-08-11 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

Microsoft SharePoint and Office are vulnerable to cross-site scripting (XSS) due to improper input neutralization during web page generation. This flaw enables authorized attackers to execute spoofing attacks over the network, potentially compromising user data and trust. Organizations utilizing these products should prioritize patching this vulnerability to mitigate the risk of exploitation.

CVE
CVE-2026-64897
Severity
MEDIUM
CVSS
4.6
EPSS
0.41%
Microsoft SharePoint Office

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-48447 HIGH CVE-2026-48441 HIGH CVE-2026-48410 HIGH CVE-2026-48409 HIGH CVE-2026-48408 HIGH CVE-2026-48407 HIGH