CVE-2026-69464: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Overview

Severity

High (CVSS 8.8)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Category

Elevation of Privilege

Exploit Status

Not Exploited

Exploitation Likelihood

Less Likely

Patch Tuesday

2026-Sep

Released

2026-09-08

EPSS Score

0.91% (percentile: 59.7%)

Description

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

FAQ

What privileges could be gained by an attacker who successfully exploited the vulnerability? An attacker could gain elevated privileges beyond those normally available to them, allowing actions such as accessing restricted information or performing operations that are typically limited to more highly privileged users or administrators.

Affected Products (1)

Microsoft Office

• Microsoft SharePoint Server Subscription Edition

Security Updates (1)

• 5002908

Acknowledgments

Henrique Pereira with Microsoft

Revision History

• 2026-09-08: Information published.