Product:
Microsoft Office SharePoint
Summary
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers can exploit this flaw to gain unauthorized access and execute malicious code.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-20951 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and must interact with the application. By providing specially crafted input, the attacker can bypass input validation checks, leading to the execution of arbitrary code. This requires no special privileges, making it easier for unauthorized users to exploit the vulnerability.
Affected Products
- Microsoft Office SharePoint: A web-based collaboration platform that integrates with Microsoft Office, allowing users to create, manage, and share content.
Mitigation
To mitigate this vulnerability, users should ensure that they are running the latest version of Microsoft Office SharePoint and apply any available security updates. Additionally, restricting local access to the system can help prevent unauthorized exploitation of this flaw.