CVE Intelligence

Microsoft Sharepoint Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Sharepoint Server: 130 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:sharepoint_server

CVE-2026-97783 Medium · 6.1 CWE-79 Oct 13, 2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-97782 Medium · 6.8 CWE-203 Oct 13, 2026
Microsoft Office SharePoint Tampering Vulnerability
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-97755 High · 8.8 CWE-125 Oct 13, 2026
Microsoft Office Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-96044 High · 8.8 CWE-269 Oct 13, 2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88209 Medium · 4.6 CWE-79 Oct 13, 2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88208 Medium · 4.6 CWE-79 Oct 13, 2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88206 High · 7.5 CWE-918 Oct 13, 2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88204 High · 7.3 CWE-79 Oct 13, 2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88200 High · 8.8 CWE-270 Oct 13, 2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88198 High · 8.8 CWE-862 Oct 13, 2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88166 High · 8.8 CWE-121 Oct 13, 2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88163 High · 8.8 CWE-122 Oct 13, 2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88155 High · 8.8 CWE-122 Oct 13, 2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-85932 Medium · 6.5 CWE-22 Oct 13, 2026
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-85900 High · 8.8 CWE-502 Oct 13, 2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70298 Medium · 6.5 CWE-22 Oct 13, 2026
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70267 High · 7.2 CWE-829 Oct 13, 2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70266 High · 8.8 CWE-89 Oct 13, 2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70259 Medium · 6.5 CWE-918 Oct 13, 2026
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70251 High · 7.5 CWE-918 Oct 13, 2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70246 High · 8.8 CWE-863 Oct 13, 2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70217 Medium · 4.9 CWE-284 Oct 13, 2026
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70202 High · 7.5 CWE-918 Oct 13, 2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-69943 High · 8.8 CWE-22 Oct 13, 2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-105720 Medium · 4.3 CWE-863 Oct 13, 2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.