CVE-2026-88200
8.8HighPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-270
Impact
Authenticated attackers can elevate privileges over the network to compromise SharePoint data and operations. They only need low-privilege network access to the target SharePoint server.
Root cause
A privilege context switching error improperly retains or escalates authorization states during user requests.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the security update referenced in the Microsoft advisory (CVE-2026-88200); no official interim workarounds are documented.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88200PatchVendor Advisory