CVE Feed

    Dashboard / CVE / CVE-2026-108452

    CVE-2026-108452

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Published:Oct 15, 2026
    Last Modified:Oct 21, 2026
    EPS:Oct 15, 2026
    EPSS Score:0.00635
    CVSS Score:8.8

    Affected Products

    Vendor
    Microsoft
    Product
    Sharepoint Server
    Vendor
    Microsoft
    Product
    Sharepoint Server Subscription Edition

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-88164 (CVSS 8.8) — Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over …
    CVE-2026-105013 (CVSS 7.4) — Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code…
    CVE-2026-96044 (CVSS 8.8) — No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over …
    CVE-2026-88206 (CVSS 7.5) — Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate pri…
    CVE-2026-88200 (CVSS 8.8) — Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate priv…
    CVE-2026-88166 (CVSS 8.8) — Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code ov…
    CVE-2026-88163 (CVSS 8.8) — Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code ov…
    CVE-2026-85932 (CVSS 6.5) — Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint …
    CVE-2026-70246 (CVSS 8.8) — Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove…
    CVE-2026-70217 (CVSS 4.9) — Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information o…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High