This vulnerability (CVE-2026-45483) affects Microsoft SharePoint Enterprise Server 2016 (version 16.0.0). It is classified as CWE-79, indicating improper neutralization of input during web page generation, which leads to cross-site scripting (XSS). The flaw allows an attacker with authorized access and user interaction to execute spoofing attacks over the network. The CVSS 3.1 base score is 4.6 (medium severity), reflecting low impact on confidentiality and integrity, no impact on availability, and requiring low attack complexity with privileges and user interaction. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An authorized attacker can exploit this vulnerability to perform cross-site scripting attacks, potentially enabling spoofing of web content. This may lead to limited confidentiality and integrity impacts, such as theft or manipulation of user data within the affected SharePoint environment. There is no reported impact on system availability. No known exploits are currently in the wild.

An official patch is available from Microsoft to remediate this vulnerability. Users of Microsoft SharePoint Enterprise Server 2016 (version 16.0.0) should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45483 to fully mitigate the risk. No additional mitigation steps are required beyond applying the official fix.