Vulnerabilidades do Microsoft Sharepoint Server

CVE-2025-64672 Crítica · 9.0 CWE-79 09/12/2025

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2025-62562 Alta · 7.8 CWE-416 09/12/2025

Microsoft Outlook Remote Code Execution Vulnerability

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

CVE-2025-62559 Alta · 7.8 CWE-416 09/12/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-62558 Alta · 7.8 CWE-416 09/12/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-62555 Alta · 7.0 CWE-416 09/12/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-62204 Alta · 8.0 CWE-502 11/11/2025

Microsoft SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-59237 Alta · 8.8 CWE-502 14/10/2025

Microsoft SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-59235 Alta · 7.1 CWE-125 14/10/2025

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2025-59232 Alta · 7.1 CWE-125 14/10/2025

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2025-59228 Alta · 8.8 CWE-20 14/10/2025

Microsoft SharePoint Remote Code Execution Vulnerability

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-59222 Alta · 7.8 CWE-416 14/10/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-59221 Alta · 7.0 CWE-416 14/10/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-53770 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-502 19/07/2025

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.

CVE-2025-49706 Média · 6.5 KEV Urgente · 83 Exploit público Ransomware CWE-287 08/07/2025

Microsoft SharePoint Improper Authentication Vulnerability

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-49704 Alta · 8.8 KEV Urgente · 78 Exploit público Ransomware CWE-94 08/07/2025

Microsoft SharePoint Code Injection Vulnerability

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2024-38094 Alta · 7.2 KEV Alta · 66 Ransomware CWE-502 09/07/2024

Microsoft SharePoint Deserialization Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

CVE-2023-29357 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-303 13/06/2023

Microsoft SharePoint Server Privilege Escalation Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVE-2023-24955 Alta · 7.2 KEV Urgente · 84 Exploit público Ransomware CWE-94 09/05/2023

Microsoft SharePoint Server Code Injection Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2020-1147 Alta · 7.8 KEV Urgente · 76 Exploit público 14/07/2020

Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

CVE-2019-0604 Crítica · 9.8 KEV Urgente · 97 Exploit público Ransomware CWE-20 05/03/2019

Microsoft SharePoint Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

CVE-2017-11826 Alta · 7.8 KEV Alta · 62 Exploit público CWE-119 13/10/2017

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.

CVE-2017-8511 Alta · 7.8 14/06/2017

A remote code execution vulnerability exists in Microsoft Office when the software fails to...

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

CVE-2017-8509 Alta · 8.8 14/06/2017

A remote code execution vulnerability exists in Microsoft Office when the software fails to...

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

CVE-2017-0281 Alta · 7.8 12/05/2017

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server...

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word 2016, and Skype for Business 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0262.

CVE-2016-3234 Média · 5.5 CWE-200 15/06/2016

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word...

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."