/
← Voltar ao feed
high

CERT-FR: Microsoft SharePoint Server Subscription Edition privilege escalation flaw (CVE-2026-88164)

1 fonte(s) · 1 atualização(ões) · publicado 14/10/2026 21:00 · coletado há 3 dias

CERT-FR advisory CERTFR-2026-AVI-1323, published 15 October 2026, reports a vulnerability in Microsoft SharePoint Server Subscription Edition that allows an attacker to elevate privileges. The flaw is tracked as CVE-2026-88164 and is based on a Microsoft security bulletin dated 13 October 2026. The advisory does not state whether the flaw is exploited in the wild, and gives no technical detail, severity score, IOCs or attribution.

Detalhes técnicos

  • Affected: Microsoft SharePoint Server Subscription Edition versions prior to 16.0.20326.20190.
  • Impact: privilege escalation.
  • Vendor reference: Microsoft MSRC bulletin for CVE-2026-88164.

Remediação

  • Consult the Microsoft security bulletin for CVE-2026-88164 and apply the patch, updating SharePoint Server Subscription Edition to version 16.0.20326.20190 or later.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 14/10/2026 21:00 · coletado 20/10 16:32 primeiro registro

    CERT-FR: Microsoft SharePoint Server Subscription Edition privilege escalation flaw (CVE-2026-88164)

    ler a análise desta fonte

    CERT-FR advisory CERTFR-2026-AVI-1323, published 15 October 2026, reports a vulnerability in Microsoft SharePoint Server Subscription Edition that allows an attacker to elevate privileges. The flaw is tracked as CVE-2026-88164 and is based on a Microsoft security bulletin dated 13 October 2026. The advisory does not state whether the flaw is exploited in the wild, and gives no technical detail, severity score, IOCs or attribution.

    Technical Details

    • Affected: Microsoft SharePoint Server Subscription Edition versions prior to 16.0.20326.20190.
    • Impact: privilege escalation.
    • Vendor reference: Microsoft MSRC bulletin for CVE-2026-88164.

    Remediation

    • Consult the Microsoft security bulletin for CVE-2026-88164 and apply the patch, updating SharePoint Server Subscription Edition to version 16.0.20326.20190 or later.