{"id":"CVE-2026-80095","published":"2026-11-10T19:21:22.760","lastModified":"2026-11-10T19:21:22.877","description":"Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","cvssScore":9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80095","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authenticated low-privilege attacker to inject malicious scripts that execute in the context of other users, enabling privilege escalation over the network. The flaw stems from improper input neutralization during web page generation.","exploitability":"Exploitation requires valid authentication and user interaction (e.g., tricking a higher-privileged user into clicking a crafted link), with no public exploit code available.","blast_radius":"Successful exploitation could allow an attacker to impersonate other users, access sensitive data, modify content, or perform unauthorized administrative actions within SharePoint.","remediation":"Apply Microsoft security update MS26-80095 (or the specific patch released for CVE-2026-80095 on [Patch Tuesday date]); if unavailable, restrict access to SharePoint web parts and custom pages that accept untrusted user input until patched.","detection":"Defenders should monitor SharePoint ULS logs for anomalous script injection patterns in user-provided fields (e.g., 'onerror=', '<script>', or encoded variants) and inspect HTTP request/response bodies for unexpected JavaScript execution in page rendering flows. No reliable network-level indicator is derivable from the published description.","tags":["xss","privilege-escalation","web","auth-bypass","sharepoint"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:59:22.863Z"}}