Product:
Office SharePoint
Summary
Insufficient granularity of access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers with low privileges can exploit this issue without user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2026-40365 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the Microsoft Office SharePoint environment. By leveraging the insufficient access control, the attacker can execute arbitrary code over the network, potentially compromising sensitive data and system integrity.
Affected Products
- Microsoft Office SharePoint: Affected by insufficient access control allowing code execution over a network.
Mitigation
To mitigate this vulnerability, it is essential to apply the latest security updates provided by Microsoft. Regularly reviewing access controls and ensuring that only authorized users have access to sensitive functionalities can also help reduce the risk of exploitation.