The vulnerability is a privilege context switching error in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges across the network, potentially gaining administrative rights or executing higher‑authority code. It is classified as CWE‑270, indicating improper privilege management.

The affected product is Microsoft SharePoint Server Subscription Edition. No specific affected versions are listed in the CNA data, so all deployments of this edition remain potentially vulnerable until patched.

The CVSS score of 8.8 indicates high severity, while the EPSS score is unavailable, making the exact exploitation likelihood uncertain. The vulnerability is not listed in CISA KEV. Although the description states the attacker must be authorized, the exploit likely proceeds over the network. Given the high severity, security teams should treat this as a critical issue with significant implications for confidentiality, integrity, and availability.