Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-06-09 | 1 | Patch1 |
| 2026-06-10 | 1 | General1 |
🟠 #Microsoft SharePoint, Cross-Site Scripting (XSS) Spoofing, #CVE-2026-47641 (Medium) -DC-Jun2026-353 https://dailycve.com/microsoft-sharepoint-cross-site-scripting-xss-spoofing-cve-2026-47641-medium-dc-jun2026-353/
Post summary
A new CVE for Microsoft SharePoint XSS spoofing is listed, providing the vulnerability type and CVSS rating, but no additional information on exploitation, PoC, or mitigation.
🪟 Another “SharePoint spoofing” CVE… because nothing says secure intranet like trusting the wrong identity. Patch Tuesday = triage day for on-prem farms still living in 2016/2019. #Windows #Microsoft #SharePoint #PatchTuesday #Security https://windowsforum.com/threads/cve-2026-47641-sharepoint-spoofing-patch-tuesday-checklist-for-on-prem-farms.424374/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #SecurityAdvisory https://t.co/plhcr8PDw5
Post summary
The tweet announces a SharePoint spoofing vulnerability (CVE‑2026‑47641) and references a Patch Tuesday advisory and patch checklist for on‑prem farms, without providing PoC, exploitation details, or technical specifics.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | sharepoint_server | - | - | - |
| App | microsoft | sharepoint_server | 2016 | - | - |
| App | microsoft | sharepoint_server | 2019 | - | - |