CVE Intelligence

Vulnerabilidades do Microsoft Microsoft SharePoint Server 2019

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Microsoft Microsoft SharePoint Server 2019: 140 registro(s), com versões afetadas e correções.

CVE-2025-62558 Alta · 7.8 CWE-416 09/12/2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62555 Alta · 7.0 CWE-416 09/12/2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62204 Alta · 8.0 CWE-502 11/11/2025
Microsoft SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59237 Alta · 8.8 CWE-502 14/10/2025
Microsoft SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59235 Alta · 7.1 CWE-125 14/10/2025
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59232 Alta · 7.1 CWE-125 14/10/2025
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59228 Alta · 8.8 CWE-20 14/10/2025
Microsoft SharePoint Remote Code Execution Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59222 Alta · 7.8 CWE-416 14/10/2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-59221 Alta · 7.0 CWE-416 14/10/2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53770 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-502 19/07/2025
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.
CVE-2025-49706 Média · 6.5 KEV Urgente · 83 Exploit público Ransomware CWE-287 08/07/2025
Microsoft SharePoint Improper Authentication Vulnerability
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49704 Alta · 8.8 KEV Urgente · 78 Exploit público Ransomware CWE-94 08/07/2025
Microsoft SharePoint Code Injection Vulnerability
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2024-38094 Alta · 7.2 KEV Alta · 66 Ransomware CWE-502 09/07/2024
Microsoft SharePoint Deserialization Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2023-29357 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-303 13/06/2023
Microsoft SharePoint Server Privilege Escalation Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-24955 Alta · 7.2 KEV Urgente · 84 Exploit público Ransomware CWE-94 09/05/2023
Microsoft SharePoint Server Code Injection Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability