Improper verification of a cryptographic signature in Microsoft Office SharePoint Server Subscription Edition allows an attacker to elevate privileges on a network. The weakness lies in the failure to correctly validate the digital signature of SharePoint components, which can be exploited to execute actions with higher authority than intended. The potential impact is that an attacker who can reach the SharePoint environment may gain unauthorized administrative rights, leading to data tampering, loss of confidentiality, or compromise of the entire SharePoint deployment.

The vulnerability affects Microsoft SharePoint Server Subscription Edition. No specific version range is listed, so all current and previous releases within this product line are potentially impacted until a patch is applied.

The CVSS score of 8.1 reflects a high severity vulnerability. EPSS is not available, and the entry is not listed in CISA KEV, indicating no confirmed widespread exploitation yet. The likely attack vector is the network, where an attacker can reach the SharePoint server to supply a malicious signed payload. If successfully exploited, the attacker could achieve full administrative control over the SharePoint instance.