Microsoft Microsoft SharePoint Server 2019 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft SharePoint Server 2019: 140 record(s), with affected versions and fixes.
CVE-2025-62558
High · 7.8
CWE-416 Dec 9, 2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62555
High · 7.0
CWE-416 Dec 9, 2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62204
High · 8.0
CWE-502 Nov 11, 2025
Microsoft SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59237
High · 8.8
CWE-502 Oct 14, 2025
Microsoft SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59235
High · 7.1
CWE-125 Oct 14, 2025
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59232
High · 7.1
CWE-125 Oct 14, 2025
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59228
High · 8.8
CWE-20 Oct 14, 2025
Microsoft SharePoint Remote Code Execution Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59222
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-59221
High · 7.0
CWE-416 Oct 14, 2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53770
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-502 Jul 19, 2025
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network.
Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild.
Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.
CVE-2025-49706
Medium · 6.5
KEV Urgent · 83 Public exploit Ransomware CWE-287 Jul 8, 2025
Microsoft SharePoint Improper Authentication Vulnerability
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49704
High · 8.8
KEV Urgent · 78 Public exploit Ransomware CWE-94 Jul 8, 2025
Microsoft SharePoint Code Injection Vulnerability
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2024-38094
High · 7.2
KEV High · 66 Ransomware CWE-502 Jul 9, 2024
Microsoft SharePoint Deserialization Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2023-29357
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-303 Jun 13, 2023
Microsoft SharePoint Server Privilege Escalation Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-24955
High · 7.2
KEV Urgent · 84 Public exploit Ransomware CWE-94 May 9, 2023
Microsoft SharePoint Server Code Injection Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability