Vulnerability in Microsoft SharePoint Server Subscription Edition

[ Description ]Official description

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

[ Fixes ]Fixes and patches

• Security bulletin: Microsoft CVE-2026-88164Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88164, cited by CERT-FR CERTFR-2026-AVI-1323

[ Advisories ]Government CERT advisories

• CERT-FR15 Oct 2026CERTFR-2026-AVI-1323

  Vulnerability in Microsoft products Translated from French

  A vulnerability has been discovered in Microsoft products. It allows an attacker to cause privilege escalation.

  CVE-2026-88164
• BSI CERT-Bund13 Oct 2026WID-SEC-2026-3916

  Microsoft Office products: Multiple vulnerabilities allow privilege escalation Translated from German

  CVE-2026-108433CVE-2026-97743CVE-2026-97011+209 more CVEs

[ References ]References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88164Vendor AdvisoryPatch