CVE Intelligence

Microsoft Sharepoint Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Sharepoint Server: 209 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:sharepoint_server

CVE-2026-55047 Medium · 5.5 CWE-125 Jul 14, 2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55045 High · 8.4 CWE-125 Jul 14, 2026
Microsoft Office Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55038 High · 7.8 CWE-121 Jul 14, 2026
Microsoft Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55040 Critical · 9.1 KEV Urgent · 73 Public exploit CWE-1390 Jul 14, 2026
Microsoft SharePoint Weak Authentication Vulnerability
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-55035 Low · 3.3 CWE-125 Jul 14, 2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55034 High · 8.7 CWE-79 Jul 14, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55033 High · 7.8 CWE-122 Jul 14, 2026
Microsoft Word Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55032 High · 7.8 CWE-416 Jul 14, 2026
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55030 Medium · 5.4 CWE-79 Jul 14, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55028 Medium · 5.5 CWE-125 Jul 14, 2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55027 Medium · 5.5 CWE-125 Jul 14, 2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55026 Medium · 5.5 CWE-190 Jul 14, 2026
Microsoft Office Information Disclosure Vulnerability
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55023 Medium · 5.5 CWE-125 Jul 14, 2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55021 High · 8.7 CWE-79 Jul 14, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55020 Medium · 5.4 CWE-79 Jul 14, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55019 Medium · 5.4 CWE-79 Jul 14, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55016 Medium · 5.4 CWE-79 Jul 14, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-58644 Critical · 9.8 KEV High · 67 Public exploit CWE-502 Jul 14, 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVE-2026-56164 Critical · 9.8 KEV High · 63 Public exploit CWE-306 Jul 14, 2026
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-54108 Medium · 6.5 CWE-73 Jul 14, 2026
Microsoft SharePoint Server Spoofing Vulnerability
External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-50522 Critical · 9.8 KEV High · 67 Public exploit CWE-502 Jul 14, 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVE-2026-48562 Medium · 4.6 CWE-79 Jun 9, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-48560 Medium · 5.4 CWE-79 Jun 9, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47641 Medium · 5.4 CWE-20 Jun 9, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47640 Medium · 5.4 CWE-79 Jun 9, 2026
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.