Executive brief
Microsoft Office SharePoint is a collaboration platform that stores and manages enterprise documents and content. An authorized attacker can exploit an execution privilege issue to access and disclose sensitive information accessible through the network. This could expose confidential business documents, user data, or other protected content without additional external compromise.
Technical details
The vulnerability exists in Microsoft Office SharePoint due to execution with unnecessary privileges in an unspecified component. An authorized attacker who has legitimate access to SharePoint can abuse elevated privilege execution contexts to read or exfiltrate data that should be restricted by normal access controls. The attack requires prior authentication to SharePoint and network access to the affected service. Patches are available from Microsoft's Security Update Guide.
Affected products
- Microsoft Office SharePoint
Timeline
- 2026-09-08: disclosed