MS
Product
Microsoft SharePoint Enterprise Server 2016
On CISA KEVExploited in the wildRansomware-linked
118
CVEs
13
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 55Medium 54Low 2
Watch
Add Microsoft SharePoint Enterprise Server 2016 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58644 In wildKEV | 9.8 | Jul 14 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-50522 In wildKEV | 9.8 | Jul 14 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-56164 In wildKEV | 9.8 | Jul 14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-20963 In wildKEV | 9.8 | Jan 13 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5535.1001 |
| CVE-2025-53770 RansomwareIn wildKEV | 9.8 | Jul 20 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5513.1001 |
| CVE-2026-55040 In wildKEV | 9.1 | Jul 14 | Microsoft SharePoint Server Security Feature Bypass Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-65660 In wildKEV | 8.8 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-45659 RansomwareIn wildKEV | 8.8 | May 22 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2025-49704 RansomwareIn wildKEV | 8.8 | Jul 8 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5508.1000 |
| CVE-2024-38094 RansomwareIn wildKEV | 7.2 | Jul 9 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5456.1000 |
| CVE-2023-24955 RansomwareIn wildKEV | 7.2 | May 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5395.1000 |
| CVE-2026-32201 In wildKEV | 6.5 | Apr 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5548.1003 |
| CVE-2025-49706 RansomwareIn wildKEV | 6.5 | Jul 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5508.1000 |
| CVE-2026-70306 | 9.3 | Aug 11 | Microsoft Office SharePoint Spoofing Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-66808 | 8.8 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-64921 | 8.8 | Aug 11 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-64901 | 8.8 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-70324 | 8.8 | Aug 11 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-65663 | 8.8 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-65658 | 8.8 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-63514 | 8.8 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-62827 | 8.8 | Aug 11 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-58277 | 8.8 | Jul 14 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55052 | 8.8 | Jul 14 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-45484 | 8.8 | Jun 9 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-45454 | 8.8 | Jun 9 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-40365 | 8.8 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2026-40357 | 8.8 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2026-33112 | 8.8 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2026-33110 | 8.8 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2026-35439 | 8.8 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2024-38018 | 8.8 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5465.1001 |
| CVE-2022-41038 | 8.8 | Oct 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5365.1000 |
| CVE-2022-38053 | 8.8 | Oct 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5365.1000 |
| CVE-2022-41036 | 8.8 | Oct 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5365.1000 |
| CVE-2022-41037 | 8.8 | Oct 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5365.1000 |
| CVE-2026-55034 | 8.7 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55021 | 8.7 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55045 | 8.4 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-45458 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-45456 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-40367 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2026-63520 | 8.1 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-47298 | 8.0 | Jun 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-47294 | 8.0 | Jun 1 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2026-40368 | 8.0 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2026-55130 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55128 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55134 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55132 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |