CVE-2026-69804 - Microsoft Office SharePoint Remote Code Execution Vulnerability

HIGH

Microsoft Office SharePoint Remote Code Execution Vulnerability

Published Sep 8, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.51%

Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
16.0.0	affected	<16.0.20326.20090

No remediation recorded yet.

Weaknesses (1)

CWE-367

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69804		vendor-advisorypatchVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner microsoft

Published Sep 8, 2026

Updated Oct 1, 2026

Reserved Aug 3, 2026

Updated Sep 9, 2026

Status Analyzed

Modified Sep 9, 2026

Severity n/a

Public date n/a