What’s Vulnerable › Products
Microsoft SharePoint Server vulnerabilities
632 known vulnerabilities, 20 confirmed exploited in the wild (CISA KEV), 183 published in the last 12 months.
Check whether your Microsoft SharePoint Server version is affected
Exploited Microsoft SharePoint Server vulnerabilities
- CVE-2026-65660 — Microsoft SharePoint Code Injection Vulnerability
- CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability
- CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2026-58644 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2026-56164 — Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
- CVE-2026-45659 — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
- CVE-2026-32201 — Microsoft SharePoint Server Improper Input Validation Vulnerability
- CVE-2026-20963 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2025-49706 — Microsoft SharePoint Improper Authentication Vulnerability
- CVE-2025-49704 — Microsoft SharePoint Code Injection Vulnerability
- CVE-2025-53770 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2024-38094 — Microsoft SharePoint Deserialization Vulnerability
- CVE-2023-24955 — Microsoft SharePoint Server Code Injection Vulnerability
- CVE-2023-29357 — Microsoft SharePoint Server Privilege Escalation Vulnerability
- CVE-2012-2539 — Microsoft Word Remote Code Execution Vulnerability
- CVE-2017-11826 — Microsoft Office Remote Code Execution Vulnerability
- CVE-2014-1761 — Microsoft Word Memory Corruption Vulnerability
- CVE-2020-1147 — Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
- CVE-2019-0604 — Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2015-1641 — Microsoft Office Memory Corruption Vulnerability
Latest Microsoft SharePoint Server vulnerabilities
- CVE-2026-108452 — Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-88164 — Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-97783 — Microsoft Office SharePoint Spoofing Vulnerability (CVSS 6.1)
- CVE-2026-97782 — Microsoft Office SharePoint Tampering Vulnerability (CVSS 6.8)
- CVE-2026-97755 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-96044 — Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-88209 — Microsoft Office SharePoint Spoofing Vulnerability (CVSS 4.6)
- CVE-2026-88208 — Microsoft Office SharePoint Spoofing Vulnerability (CVSS 4.6)
- CVE-2026-88206 — Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 7.5)
- CVE-2026-88204 — Microsoft Office SharePoint Spoofing Vulnerability (CVSS 7.3)
- CVE-2026-88200 — Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-88198 — Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-88166 — Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-88163 — Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-88155 — Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-85932 — Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-85900 — Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-70298 — Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-70267 — Microsoft Office SharePoint Remote Code Execution Vulnerability (CVSS 7.2)
- CVE-2026-70266 — Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-70259 — Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-70251 — Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 7.5)
- CVE-2026-70246 — Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-70217 — Microsoft Office SharePoint Information Disclosure Vulnerability (CVSS 4.9)
- CVE-2026-70202 — Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVSS 7.5)