Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-45659 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-45659)
vulnerability in Microsoft deserialization (CVE-2026-45659). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-35439 |
|
Unsafe Deserialization in deserialization (CVE-2026-35439)
vulnerability in deserialization (CVE-2026-35439). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40368 |
|
Unsafe Deserialization in deserialization (CVE-2026-40368)
vulnerability in deserialization (CVE-2026-40368). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40357 |
|
Unsafe Deserialization in deserialization (CVE-2026-40357)
vulnerability in deserialization (CVE-2026-40357). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40365 |
|
Vulnerability in microsoft (CVE-2026-40365)
vulnerability in microsoft (CVE-2026-40365). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40367 |
|
Vulnerability in microsoft (CVE-2026-40367)
vulnerability in microsoft (CVE-2026-40367). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33110 |
|
Unsafe Deserialization in deserialization (CVE-2026-33110)
vulnerability in deserialization (CVE-2026-33110). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33112 |
|
Unsafe Deserialization in deserialization (CVE-2026-33112)
vulnerability in deserialization (CVE-2026-33112). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32201 KEV |
|
[KEV] Vulnerability in Microsoft sharepoint-server (CVE-2026-32201)
vulnerability in Microsoft sharepoint-server (CVE-2026-32201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-49706 KEV |
|
[KEV] Authentication Bypass in Microsoft sharepoint (CVE-2025-49706)
authentication bypass in Microsoft sharepoint (CVE-2025-49706). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-53770 KEV |
|
[KEV] Unsafe Deserialization in Microsoft sharepoint (CVE-2025-53770)
vulnerability in Microsoft sharepoint (CVE-2025-53770). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-24955 KEV |
|
[KEV] Code Injection in Microsoft sharepoint-server (CVE-2023-24955)
code injection in Microsoft sharepoint-server (CVE-2023-24955). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-29357 KEV |
|
[KEV] Vulnerability in Microsoft sharepoint-server (CVE-2023-29357)
vulnerability in Microsoft sharepoint-server (CVE-2023-29357). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-21716 |
|
Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
|
| CVE-2023-21717 |
|
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability
|
| CVE-2022-41122 |
|
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
|
| CVE-2022-41103 |
|
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
|
| CVE-2022-41060 |
|
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
|
| CVE-2022-41061 |
|
Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
|
| CVE-2022-41062 |
|
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
|
| CVE-2022-21840 |
|
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
|
| CVE-2021-38651 |
|
Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-38652.
Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-38652.
|
| CVE-2021-36940 |
|
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
|
| CVE-2021-34467 |
|
Vulnerability in microsoft (CVE-2021-34467)
vulnerability in microsoft (CVE-2021-34467). Confidential information can be exposed externally.
|
| CVE-2021-34517 |
|
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
|
| CVE-2021-34519 |
|
Microsoft SharePoint Server Information Disclosure Vulnerability
Microsoft SharePoint Server Information Disclosure Vulnerability
|
| CVE-2021-34520 |
|
Unsafe Deserialization in microsoft (CVE-2021-34520)
vulnerability in microsoft (CVE-2021-34520). Confidential information can be exposed externally.
|
| CVE-2021-34468 |
|
Vulnerability in microsoft (CVE-2021-34468)
vulnerability in microsoft (CVE-2021-34468). Successful exploitation can lead to full system takeover.
|
| CVE-2021-27076 |
|
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
|
| CVE-2021-27052 |
|
Microsoft SharePoint Server Information Disclosure Vulnerability
Microsoft SharePoint Server Information Disclosure Vulnerability
|
| CVE-2021-24104 |
|
Microsoft SharePoint Spoofing Vulnerability
Microsoft SharePoint Spoofing Vulnerability
|
| CVE-2020-1099 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1099)
cross-site scripting in microsoft (CVE-2020-1099). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1100 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1100)
cross-site scripting in microsoft (CVE-2020-1100). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1101 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1101)
cross-site scripting in microsoft (CVE-2020-1101). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1102 |
|
Unrestricted File Upload in microsoft (CVE-2020-1102)
vulnerability in microsoft (CVE-2020-1102). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1103 |
|
Information Disclosure in csrf (CVE-2020-1103)
vulnerability in csrf (CVE-2020-1103). Confidential information can be exposed externally.
|
| CVE-2020-1104 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1104)
cross-site scripting in microsoft (CVE-2020-1104). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1105 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1105)
cross-site scripting in microsoft (CVE-2020-1105). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1106 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1106)
cross-site scripting in microsoft (CVE-2020-1106). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1107 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1107)
cross-site scripting in microsoft (CVE-2020-1107). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1069 |
|
Buffer Overflow in csharp (CVE-2020-1069)
vulnerability in csharp (CVE-2020-1069). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1023 |
|
Unrestricted File Upload in microsoft (CVE-2020-1023)
vulnerability in microsoft (CVE-2020-1023). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1024 |
|
Unrestricted File Upload in microsoft (CVE-2020-1024)
vulnerability in microsoft (CVE-2020-1024). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8742 |
|
Buffer Overflow in microsoft (CVE-2017-8742)
vulnerability in microsoft (CVE-2017-8742). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8743 |
|
Buffer Overflow in microsoft (CVE-2017-8743)
vulnerability in microsoft (CVE-2017-8743). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8629 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2017-8629)
cross-site scripting in microsoft (CVE-2017-8629). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-8654 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2017-8654)
cross-site scripting in microsoft (CVE-2017-8654). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-8569 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2017-8569)
cross-site scripting in microsoft (CVE-2017-8569). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8501 |
|
Buffer Overflow in microsoft (CVE-2017-8501)
vulnerability in microsoft (CVE-2017-8501). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8509 |
|
Vulnerability in microsoft (CVE-2017-8509)
vulnerability in microsoft (CVE-2017-8509). Successful exploitation can lead to full system takeover.
|