MSRC-CVE-2026-32201 — Microsoft SharePoint Server Spoofing Vulnerability

Summary

Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

Details

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?
An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).

Security updates
16.0.5548.1003 — https://support.microsoft.com/help/5002861
16.0.10417.20114 — https://support.microsoft.com/help/5002854
16.0.19725.20210 — https://support.microsoft.com/help/5002853

Vulnerabilities 1

Medium 6.5

CVE-2026-32201 Exploited Public exploit EPSS 44%

Microsoft SharePoint Server Spoofing Vulnerability

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Apr 14, 2026
KEV Apr 14, 2026

Revision history

2026-04-14 #1
Information published.
2026-04-14 #2
Added an acknowledgement. This is an informational change only.

References

CVE-2026-32201 Microsoft SharePoint Server Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss