{"id":"CVE-2026-88200","published":"2026-10-13T19:21:41.547","lastModified":"2026-10-14T19:43:29.060","description":"Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-270"],"vendors":["microsoft"],"products":["sharepoint server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88200","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A privilege context switching error in SharePoint allows authenticated attackers to escalate their privileges over the network, potentially leading to full system compromise. This vulnerability is particularly concerning because it can be exploited remotely without user interaction.","exploitability":"Exploitation requires an authenticated user account with minimal privileges, but is relatively straightforward once access is obtained since the flaw enables privilege escalation without additional attack vectors or complex payloads.","blast_radius":"If exploited, this vulnerability could allow attackers to gain administrative access across SharePoint environments, potentially leading to data breaches, unauthorized content modifications, and complete compromise of SharePoint-based collaboration platforms.","remediation":"Apply the Microsoft security update KB5042387 which addresses this privilege escalation vulnerability in SharePoint Server 2019 and SharePoint Server 2026.","detection":"Monitor for unusual privilege elevation events in SharePoint audit logs, particularly when users with standard permissions suddenly gain administrative capabilities. Look for authentication anomalies in the SharePoint trace logs where context switching failures occur during high-privilege operations.","tags":["privilege-escalation","sharepoint","network","authentication"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:17:40.230Z"}}