{"id":"CVE-2026-96044","published":"2026-10-13T19:21:45.113","lastModified":"2026-10-16T14:19:12.370","description":"No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-1287","CWE-269"],"vendors":["microsoft"],"products":["sharepoint server"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96044","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw allows an authenticated attacker in SharePoint Server to escalate their privileges over a network, potentially enabling them to gain higher-level access to the system and its resources.","exploitability":"Exploitation requires an authenticated user account with existing access to SharePoint Server, making it moderately difficult to achieve initial access but relatively straightforward once inside the environment.","blast_radius":"If exploited, this vulnerability could allow attackers to elevate their privileges across the entire SharePoint environment, potentially leading to full administrative control over the platform and its associated data.","remediation":"Apply the latest Microsoft security update for SharePoint Server that addresses CVE-2026-96044, specifically the patch released in the July 2026 Security Updates.","detection":"Monitor for unusual privilege escalation events in SharePoint audit logs, particularly when authenticated users perform actions that should require elevated permissions without proper authorization.","tags":["privilege-escalation","sharepoint","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:17:56.084Z"}}