What’s Vulnerable › Products
Microsoft SharePoint Server vulnerabilities
256 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your Microsoft SharePoint Server version is affected
Exploited Microsoft SharePoint Server vulnerabilities
- CVE-2025-49706 — Microsoft SharePoint Improper Authentication Vulnerability
- CVE-2023-24955 — Microsoft SharePoint Server Code Injection Vulnerability
- CVE-2017-11826 — Microsoft Office Remote Code Execution Vulnerability
- CVE-2020-1147 — Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
- CVE-2019-0604 — Microsoft SharePoint Remote Code Execution Vulnerability
Latest Microsoft SharePoint Server vulnerabilities
- CVE-2025-54905 — Microsoft Word Information Disclosure Vulnerability (CVSS 7.1)
- CVE-2025-53736 — Microsoft Word Information Disclosure Vulnerability (CVSS 6.2)
- CVE-2025-53733 — Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4)
- CVE-2025-49706 — Microsoft SharePoint Improper Authentication Vulnerability (CVSS 6.5) — exploited
- CVE-2025-47994 — Microsoft Office Elevation of Privilege Vulnerability (CVSS 8.6)
- CVE-2025-47172 — Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2025-47169 — Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-47168 — Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-47166 — Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2025-47163 — Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2025-29820 — Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-29794 — Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2025-29793 — Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 7.2)
- CVE-2025-27747 — Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2023-38177 — Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 6.8)
- CVE-2023-24955 — Microsoft SharePoint Server Code Injection Vulnerability (CVSS 7.2) — exploited
- CVE-2023-24954 — Microsoft SharePoint Server Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2023-24950 — Microsoft SharePoint Server Spoofing Vulnerability (CVSS 6.5)
- CVE-2023-21717 — Microsoft SharePoint Server Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2023-21716 — Microsoft Word Remote Code Execution Vulnerability (CVSS 9.8)
- CVE-2022-44693 — Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2022-41122 — Microsoft SharePoint Server Spoofing Vulnerability (CVSS 6.5)
- CVE-2022-41103 — Microsoft Word Information Disclosure Vulnerability (CVSS 5.5)
- CVE-2022-41062 — Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2022-41061 — Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8)