CyberRota Analysis
AI-GeneratedMicrosoft SharePoint and Office are vulnerable to a cross-site scripting (XSS) flaw that allows authorized attackers to inject malicious scripts, potentially leading to spoofing attacks. This vulnerability poses a significant risk to organizations using these products, as it can compromise user sessions and data integrity. IT security teams managing SharePoint and Office environments should prioritize remediation efforts to mitigate the risk of exploitation.
CVE
CVE-2026-64900
Severity
HIGH
CVSS
7.3
EPSS
0.45%
Microsoft SharePoint Office
Original NVD Description
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Related CVEs
Other vulnerabilities affecting the same vendor(s)