Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: sharepoint-server Clear
ID Title
CVE-2026-45659 KEV [KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-45659)
vulnerability in Microsoft deserialization (CVE-2026-45659). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-35439 Unsafe Deserialization in deserialization (CVE-2026-35439)
vulnerability in deserialization (CVE-2026-35439). Successful exploitation can lead to full system takeover.
CVE-2026-40368 Unsafe Deserialization in deserialization (CVE-2026-40368)
vulnerability in deserialization (CVE-2026-40368). Successful exploitation can lead to full system takeover.
CVE-2026-40357 Unsafe Deserialization in deserialization (CVE-2026-40357)
vulnerability in deserialization (CVE-2026-40357). Successful exploitation can lead to full system takeover.
CVE-2026-40365 Vulnerability in microsoft (CVE-2026-40365)
vulnerability in microsoft (CVE-2026-40365). Successful exploitation can lead to full system takeover.
CVE-2026-40367 Vulnerability in microsoft (CVE-2026-40367)
vulnerability in microsoft (CVE-2026-40367). Successful exploitation can lead to full system takeover.
CVE-2026-33110 Unsafe Deserialization in deserialization (CVE-2026-33110)
vulnerability in deserialization (CVE-2026-33110). Successful exploitation can lead to full system takeover.
CVE-2026-33112 Unsafe Deserialization in deserialization (CVE-2026-33112)
vulnerability in deserialization (CVE-2026-33112). Successful exploitation can lead to full system takeover.
CVE-2026-32201 KEV [KEV] Vulnerability in Microsoft sharepoint-server (CVE-2026-32201)
vulnerability in Microsoft sharepoint-server (CVE-2026-32201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-49706 KEV [KEV] Authentication Bypass in Microsoft sharepoint (CVE-2025-49706)
authentication bypass in Microsoft sharepoint (CVE-2025-49706). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-53770 KEV [KEV] Unsafe Deserialization in Microsoft sharepoint (CVE-2025-53770)
vulnerability in Microsoft sharepoint (CVE-2025-53770). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2023-24955 KEV [KEV] Code Injection in Microsoft sharepoint-server (CVE-2023-24955)
code injection in Microsoft sharepoint-server (CVE-2023-24955). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-29357 KEV [KEV] Vulnerability in Microsoft sharepoint-server (CVE-2023-29357)
vulnerability in Microsoft sharepoint-server (CVE-2023-29357). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-21716 Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
CVE-2023-21717 Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2022-41122 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-41103 Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
CVE-2022-41060 Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
CVE-2022-41061 Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41062 Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-21840 Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-38651 Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-38652.
Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-38652.
CVE-2021-36940 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-34467 Vulnerability in microsoft (CVE-2021-34467)
vulnerability in microsoft (CVE-2021-34467). Confidential information can be exposed externally.
CVE-2021-34517 Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-34519 Microsoft SharePoint Server Information Disclosure Vulnerability
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-34520 Unsafe Deserialization in microsoft (CVE-2021-34520)
vulnerability in microsoft (CVE-2021-34520). Confidential information can be exposed externally.
CVE-2021-34468 Vulnerability in microsoft (CVE-2021-34468)
vulnerability in microsoft (CVE-2021-34468). Successful exploitation can lead to full system takeover.
CVE-2021-27076 Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-27052 Microsoft SharePoint Server Information Disclosure Vulnerability
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-24104 Microsoft SharePoint Spoofing Vulnerability
Microsoft SharePoint Spoofing Vulnerability
CVE-2020-1099 Cross-Site Scripting (XSS) in microsoft (CVE-2020-1099)
cross-site scripting in microsoft (CVE-2020-1099). Risk of unauthorized operations or information disclosure.
CVE-2020-1100 Cross-Site Scripting (XSS) in microsoft (CVE-2020-1100)
cross-site scripting in microsoft (CVE-2020-1100). Risk of unauthorized operations or information disclosure.
CVE-2020-1101 Cross-Site Scripting (XSS) in microsoft (CVE-2020-1101)
cross-site scripting in microsoft (CVE-2020-1101). Risk of unauthorized operations or information disclosure.
CVE-2020-1102 Unrestricted File Upload in microsoft (CVE-2020-1102)
vulnerability in microsoft (CVE-2020-1102). Successful exploitation can lead to full system takeover.
CVE-2020-1103 Information Disclosure in csrf (CVE-2020-1103)
vulnerability in csrf (CVE-2020-1103). Confidential information can be exposed externally.
CVE-2020-1104 Cross-Site Scripting (XSS) in microsoft (CVE-2020-1104)
cross-site scripting in microsoft (CVE-2020-1104). Risk of unauthorized operations or information disclosure.
CVE-2020-1105 Cross-Site Scripting (XSS) in microsoft (CVE-2020-1105)
cross-site scripting in microsoft (CVE-2020-1105). Risk of unauthorized operations or information disclosure.
CVE-2020-1106 Cross-Site Scripting (XSS) in microsoft (CVE-2020-1106)
cross-site scripting in microsoft (CVE-2020-1106). Risk of unauthorized operations or information disclosure.
CVE-2020-1107 Cross-Site Scripting (XSS) in microsoft (CVE-2020-1107)
cross-site scripting in microsoft (CVE-2020-1107). Risk of unauthorized operations or information disclosure.
CVE-2020-1069 Buffer Overflow in csharp (CVE-2020-1069)
vulnerability in csharp (CVE-2020-1069). Successful exploitation can lead to full system takeover.
CVE-2020-1023 Unrestricted File Upload in microsoft (CVE-2020-1023)
vulnerability in microsoft (CVE-2020-1023). Successful exploitation can lead to full system takeover.
CVE-2020-1024 Unrestricted File Upload in microsoft (CVE-2020-1024)
vulnerability in microsoft (CVE-2020-1024). Successful exploitation can lead to full system takeover.
CVE-2017-8742 Buffer Overflow in microsoft (CVE-2017-8742)
vulnerability in microsoft (CVE-2017-8742). Successful exploitation can lead to full system takeover.
CVE-2017-8743 Buffer Overflow in microsoft (CVE-2017-8743)
vulnerability in microsoft (CVE-2017-8743). Successful exploitation can lead to full system takeover.
CVE-2017-8629 Cross-Site Scripting (XSS) in microsoft (CVE-2017-8629)
cross-site scripting in microsoft (CVE-2017-8629). Risk of unauthorized operations or information disclosure.
CVE-2017-8654 Cross-Site Scripting (XSS) in microsoft (CVE-2017-8654)
cross-site scripting in microsoft (CVE-2017-8654). Risk of unauthorized operations or information disclosure.
CVE-2017-8569 Cross-Site Scripting (XSS) in microsoft (CVE-2017-8569)
cross-site scripting in microsoft (CVE-2017-8569). Successful exploitation can lead to full system takeover.
CVE-2017-8501 Buffer Overflow in microsoft (CVE-2017-8501)
vulnerability in microsoft (CVE-2017-8501). Successful exploitation can lead to full system takeover.
CVE-2017-8509 Vulnerability in microsoft (CVE-2017-8509)
vulnerability in microsoft (CVE-2017-8509). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →