Microsoft SharePoint Spoofing Vulnerability via Cross-Site Scripting

A cross-site scripting vulnerability has been identified in Microsoft Office SharePoint, allowing an authorized attacker to perform spoofing over the network. This issue arises from improper neutralization of input during web page generation.

Impact

Exploitation of this vulnerability could lead to spoofing attacks, allowing an attacker to impersonate another user or entity.

Remediation

Users should install the security update released in July 2026. For SharePoint Server 2016 users, the same update applies to SharePoint Enterprise Server 2016.