CVE-2026-88198
Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-88198 is fixed in Microsoft SharePoint Server Subscription Edition on 1 platform by KB5002927 (version ), released October 13, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.8
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0071
53rd percentile
<p>Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Microsoft SharePoint Server Subscription Edition | KB5002927 | Oct 13, 2026 | |