Browse CVEs

HIGH 8.7 CVE-2026-70355 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,9002026-08-11 CRITICAL 9.3 CVE-2026-70306 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker t… Sharepoint Server 16.0.19725.20434+ Fix from $5,7502026-08-11 HIGH 7.6 CVE-2026-65767 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to … Teams 1.0.76.202611302+ Fix from $4,9002026-08-11 MEDIUM 5.4 CVE-2026-64922 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 MEDIUM 5.4 CVE-2026-64916 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 MEDIUM 5.4 CVE-2026-64902 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 MEDIUM 5.4 CVE-2026-64897 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 MEDIUM 5.4 CVE-2026-64900 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 MEDIUM 5.4 CVE-2026-62914 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to pe… Exchange Server 15.02.2562.046+ Fix from $4,0002026-08-11 MEDIUM 5.4 CVE-2026-62829 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 CRITICAL 9.6 CVE-2026-57104 Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to ele… Azure Storage Explorer No fix yet Fix from $5,7502026-08-11 MEDIUM 5.4 CVE-2026-57105 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 CRITICAL 9.6 CVE-2026-70332 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker t… Sharepoint Online No fix yet Fix from $2,3002026-08-07 MEDIUM 6.1 CVE-2026-58643 Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perfo… Windows Admin Center 2511+ Fix from $1,6002026-07-16 MEDIUM 5.4 CVE-2026-62826 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,6002026-07-16 MEDIUM 6.1 CVE-2026-57101 Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass … Visual Studio Code 1.128.1+ Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-55135 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-55126 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,6002026-07-14 HIGH 8.7 CVE-2026-55034 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,9502026-07-14 MEDIUM 5.4 CVE-2026-55030 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,6002026-07-14 HIGH 8.7 CVE-2026-55021 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,9502026-07-14 MEDIUM 5.4 CVE-2026-55016 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-55019 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-55020 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20434+ Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-58647 Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing ov… Power Bi Report Server 15.0.1121.120+ Fix from $1,6002026-07-14 CRITICAL 9.6 CVE-2026-55008 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to … Exchange Server 15.02.2562.045+ Fix from $2,3002026-07-14 MEDIUM 6.1 CVE-2026-47646 Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker t… Dynamics 365 Customer Voice Mitigation only Fix from $1,6002026-07-09 MEDIUM 6.1 CVE-2026-58524 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attack… Edge Chromium 150.0.4078.48+ Fix from $1,6002026-07-03 MEDIUM 6.1 CVE-2026-58298 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attack… Edge Chromium 150.0.4078.48+ Fix from $1,6002026-07-03 HIGH 7.1 CVE-2026-57977 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attack… Edge Chromium 150.0.4078.48+ Fix from $1,9502026-07-03