MS
Product
Microsoft SharePoint Server 2019
On CISA KEVExploited in the wildRansomware-linked
150
CVEs
14
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 9High 80Medium 59Low 2
Watch
Add Microsoft SharePoint Server 2019 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45456 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20153 |
| CVE-2026-40367 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20128 |
| CVE-2026-63520 | 8.1 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20198 |
| CVE-2026-47298 | 8.0 | Jun 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20153 |
| CVE-2026-47294 | 8.0 | Jun 1 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20128 |
| CVE-2026-40368 | 8.0 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20128 |
| CVE-2025-62204 | 8.0 | Nov 11 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20068 |
| CVE-2026-55130 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-55128 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-55134 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-55132 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-55038 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-55055 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-55127 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-55033 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-55032 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-55125 | 7.8 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-44824 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20153 |
| CVE-2026-44819 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20153 |
| CVE-2026-45471 | 7.8 | Jun 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20153 |
| CVE-2026-45475 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20153 |
| CVE-2026-26113 | 7.8 | Mar 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20102 |
| CVE-2026-20948 | 7.8 | Jan 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20083 |
| CVE-2026-20951 | 7.8 | Jan 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20083 |
| CVE-2025-62559 | 7.8 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20075 |
| CVE-2025-62558 | 7.8 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20075 |
| CVE-2025-62562 | 7.8 | Dec 9 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20075 |
| CVE-2025-59222 | 7.8 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20059 |
| CVE-2025-54906 | 7.8 | Sep 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20047 |
| CVE-2026-21511 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 16.0.0 before 16.0.10417.20097 |
| CVE-2026-21260 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 16.0.0 before 16.0.10417.20097 |
| CVE-2024-43466 | 7.5 | Sep 10 | Microsoft SharePoint Server Denial of Service Vulnerability Affected: 16.0.0 before 16.0.10414.20002 |
| CVE-2024-38228 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10414.20002 |
| CVE-2024-38227 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10414.20002 |
| CVE-2024-43464 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10414.20002 |
| CVE-2025-59232 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.10417.20059 |
| CVE-2025-59235 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.10417.20059 |
| CVE-2025-54905 | 7.1 | Sep 9 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.10417.20047 |
| CVE-2026-20943 | 7.0 | Jan 13 | Microsoft Office Click-To-Run Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20083 |
| CVE-2025-62555 | 7.0 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20075 |
| CVE-2025-59221 | 7.0 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20059 |
| CVE-2026-62839 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.10417.20198 |
| CVE-2026-58639 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.10417.20198 |
| CVE-2026-63516 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.10417.20198 |
| CVE-2026-63512 | 6.5 | Aug 11 | Microsoft SharePoint Server Tampering Vulnerability Affected: 16.0.0 before 16.0.10417.20198 |
| CVE-2026-62837 | 6.5 | Aug 11 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.10417.20198 |
| CVE-2026-55051 | 6.5 | Jul 14 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-54108 | 6.5 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-97783 | 6.1 | Oct 13 | Microsoft Office SharePoint Spoofing Vulnerability Affected: 16.0.0 before 16.0.10417.20175 |
| CVE-2026-33113 | 6.1 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.10417.20153 |