Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔒 SharePoint can expose legal-hold and eDiscovery metadata beyond permissions to an authorized network attacker. Admins: install KB5002908—“authorized” shouldn’t mean “see everything.” https://windowsforum.com/news/cve-2026-69409-microsoft-office-sharepoint-information-disclosure-vulnerability.445890/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve202669409 https://t.co/aN3Oi9VJgI
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | sharepoint_server | - | - | - |