CVE-2026-102859 Microsoft Office SharePoint Spoofing Vulnerability

Reported by Microsoft Security Response Center

Summary by Cyber Security News13 Oct 2026, 16:00 CEST

About this summary. This is a short, independently written summary of an article first published by Microsoft Security Response Center. Cyber Security News did not report or verify the underlying story. Read the original: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102859

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Read the full article at Microsoft Security Response Center →

Source attribution: headline and facts are from Microsoft Security Response Center (msrc.microsoft.com). Summary method: excerpt of the source description. See our source attribution policy.