CVE-2026-88200: CWE-270: Privilege Context Switching Error in Microsoft Microsoft SharePoint Server Subscription Edition

This vulnerability (CVE-2026-88200) involves a privilege context switching error in Microsoft SharePoint Server Subscription Edition. An authorized attacker can exploit this flaw remotely to elevate their privileges, potentially gaining higher access than intended. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability affects versions >=16.0.0 and <16.0.20326.20190. Microsoft has published an official security update to remediate this issue.

Successful exploitation allows an authorized attacker to elevate privileges on the affected SharePoint server, potentially leading to full compromise of confidentiality, integrity, and availability of the system. This could enable unauthorized access to sensitive data and administrative functions.

An official fix is available from Microsoft. Users should apply the security update for SharePoint Server Subscription Edition to versions 16.0.20326.20190 or later to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88200 for detailed patch information and deployment guidance.