Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
#windowsupdate #microsoft つづき ・CVE-2026-45481 7.3 Microsoft Office SharePoint ・CVE-2026-45586 7.8 Windows Collaborative Translation Framework ・CVE-2026-45658 7.8 Windows BitLocker ・CVE-2026-47291 9.8 Windows HTTP.sys つづく…
Post summary
The tweet simply announces a set of newly disclosed CVEs, listing product affected and severity scores, without any mention of PoC, exploits, or patches.
🪟 Another SharePoint spoofing CVE (CVE-2026-45481) = Microsoft’s way of saying “trust me, but patch fast.” If identity + docs can be faked, your workflows are the next victim. #Windows #Microsoft #SharePoint #Security https://windowsforum.com/threads/cve-2026-45481-sharepoint-spoofing-what-it-teams-must-patch-now.424666/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #EnterprisePatching https://t.co/LMMJjfUWye
Post summary
The tweet announces a new SharePoint spoofing vulnerability (CVE‑2026‑45481) and urges users to patch promptly to prevent identity and document forgery.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | sharepoint_server | - | - | - |
| App | microsoft | sharepoint_server | 2016 | - | - |
| App | microsoft | sharepoint_server | 2019 | - | - |