Microsoft · SharePoint Server
CVE-2026-32201
Microsoft SharePoint Server Spoofing Vulnerability
What it is
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CISA: Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Deadline for US federal agencies: April 28, 2026
More exploited flaws from Microsoft
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jul 14, 2026 | Missing Authentication for Critical Function | SharePoint Server | Medium 5.3 | 1.0% |
| Jul 1, 2026 | Deserialization of Untrusted Data | SharePoint Server | High 8.8 | 80% |
| Mar 26, 2024 | Code Injection | SharePoint Server | High 7.2 | 85% |
| Jan 10, 2024 | Privilege Escalation | SharePoint Server | Critical 9.8 | >99.9% |
| Oct 13, 2026 | Command Injection | Windows | High 8.8 | 9.8% |
| Sep 25, 2026 | Code Injection | SharePoint | High 8.8 | 8.2% |
| Sep 8, 2026 | Link Following | Windows | High 7.8 | 0.4% |
| Sep 8, 2026 | Heap-Based Buffer Overflow | Windows | High 7.8 | 0.4% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.