{"id":"CVE-2026-88166","published":"2026-10-13T19:21:37.200","lastModified":"2026-10-14T19:44:44.833","description":"Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121","CWE-190"],"vendors":["microsoft"],"products":["sharepoint server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88166","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A Microsoft SharePoint Server vulnerability allows authorized users to trigger integer overflow conditions that can lead to remote code execution. This flaw is particularly dangerous because it enables authenticated attackers to execute arbitrary code on the server over the network.","exploitability":"Exploitation requires an authenticated user account with access to SharePoint functionality, making it moderately difficult but not highly complex to achieve, with the main precondition being valid user credentials.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on SharePoint servers, potentially leading to full system compromise and data exfiltration across the organization's SharePoint environment.","remediation":"Apply the Microsoft security update MS26-088 for SharePoint Server 2019 and SharePoint Server 2021, or upgrade to SharePoint Server 2026 or later versions that contain the fix.","detection":"Monitor for unusual memory allocation patterns or unexpected process behavior in SharePoint services, particularly around integer overflow conditions. Look for abnormal memory usage spikes or process crashes in SharePoint web applications.","tags":["rce","sharepoint","integer-overflow","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:05:31.771Z"}}