{"id":"CVE-2026-88163","published":"2026-10-13T19:21:36.900","lastModified":"2026-10-14T19:44:41.720","description":"Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122","CWE-190"],"vendors":["microsoft"],"products":["sharepoint server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88163","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A Microsoft SharePoint Server vulnerability allows authorized attackers to execute arbitrary code through integer overflow or wraparound issues in Office components. This represents a critical privilege escalation risk where authenticated users can potentially gain full system control.","exploitability":"Exploitation requires an authenticated user with access to SharePoint Server, making it moderately difficult but not highly complex to achieve, with the main precondition being valid user credentials and access to the affected SharePoint functionality.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on SharePoint servers with high privileges, potentially leading to complete system compromise and data exfiltration across the entire SharePoint environment.","remediation":"Apply Microsoft Security Update MS26-088163 or upgrade to SharePoint Server 2026.1 or later immediately.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","sharepoint","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:05:17.481Z"}}