MS
Product
Microsoft SharePoint Server Subscription Edition
by Microsoft · last CVE Oct 15, 2026
On CISA KEVExploited in the wildRansomware-linked
177
CVEs
12
On KEV
9.8
Max CVSS
38
New 30D
Severity mix
Critical 7High 91Medium 76Low 3
Watch

Add Microsoft SharePoint Server Subscription Edition to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-58644
In wildKEV
9.8
16%
Jul 14
Microsoft SharePoint Remote Code Execution Vulnerability
Affected: 16.0.0 before 16.0.19725.20384
CVE-2026-50522
In wildKEV
9.8
3%
Jul 14
Microsoft SharePoint Remote Code Execution Vulnerability
Affected: 16.0.0 before 16.0.19725.20434
CVE-2026-56164
In wildKEV
9.8
1%
Jul 14
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Affected: 16.0.0 before 16.0.19725.20434
CVE-2026-20963
In wildKEV
9.8
29%
Jan 13
Microsoft SharePoint Remote Code Execution Vulnerability
Affected: 16.0.0 before 16.0.19127.20442
CVE-2025-53770
RansomwareIn wildKEV
9.8
100%
Jul 20
Microsoft SharePoint Server Remote Code Execution Vulnerability
Affected: 16.0.0 before 16.0.18526.20508
CVE-2026-55040
In wildKEV
9.1
70%
Jul 14
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Affected: 16.0.0 before 16.0.19725.20434
CVE-2026-70306
9.3
1%
Aug 11
Microsoft Office SharePoint Spoofing Vulnerability
Affected: 16.0.0 before 16.0.19725.20522
Showing 7