SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58644 In wildKEV | 9.8 | Jul 14 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-50522 In wildKEV | 9.8 | Jul 14 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-56164 In wildKEV | 9.8 | Jul 14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-20963 In wildKEV | 9.8 | Jan 13 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: before 16.0.19127.20442; 2016; 2019 |
| CVE-2025-53770 RansomwareIn wildKEV | 9.8 | Jul 20 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.18526.20508; 2016; 2019 |
| CVE-2023-29357 RansomwareIn wildKEV | 9.8 | Jun 13 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2019-0604 RansomwareIn wildKEV | 9.8 | Mar 5 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2010; 2019 |
| CVE-2026-55040 In wildKEV | 9.1 | Jul 14 | Microsoft SharePoint Server Security Feature Bypass Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-65660 In wildKEV | 8.8 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-45659 RansomwareIn wildKEV | 8.8 | May 22 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: before 16.0.19725.20280; 2016; 2019 |
| CVE-2025-49704 RansomwareIn wildKEV | 8.8 | Jul 8 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2020-1147 In wildKEV | 7.8 | Jul 14 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Affected: 2010; 2019 |
| CVE-2017-11826 In wildKEV | 7.8 | Oct 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 2010; 2013 |
| CVE-2015-1641 In wildKEV | 7.8 | Apr 14 | Microsoft Office Memory Corruption Vulnerability Affected: 2010; 2013 |
| CVE-2014-1761 In wildKEV | 7.8 | Mar 24 | Microsoft Word Memory Corruption Vulnerability Affected: 2010; 2010; 2013 |
| CVE-2012-2539 In wildKEV | 7.8 | Dec 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2024-38094 RansomwareIn wildKEV | 7.2 | Jul 9 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2023-24955 RansomwareIn wildKEV | 7.2 | May 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2026-32201 In wildKEV | 6.5 | Apr 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20210; 2016; 2019 |
| CVE-2025-49706 RansomwareIn wildKEV | 6.5 | Jul 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.18526.20424; 2019 |
| CVE-2020-1595 | 9.9 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input Affected: 2019 |
| CVE-2020-1210 | 9.9 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2019 |
| CVE-2023-21716 | 9.8 | Feb 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2020-1025 | 9.8 | Jul 14 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation Affected: 2019 |
| CVE-2019-1205 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2019 |
| CVE-2026-70306 | 9.3 | Aug 11 | Microsoft Office SharePoint Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-26105 | 9.3 | Mar 10 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a… Affected: before 16.0.19725.20076; 2016; 2019 |
| CVE-2025-64672 | 9.0 | Dec 9 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a… Affected: before 16.0.19127.20378 |
| CVE-2020-1523 | 8.9 | Sep 11 | <p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data Affected: 2019 |
| CVE-2026-108452 | 8.8 | Oct 15 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-88164 | 8.8 | Oct 14 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-96044 | 8.8 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-88200 | 8.8 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-88166 | 8.8 | Oct 13 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-88163 | 8.8 | Oct 13 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-70246 | 8.8 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-97755 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-88198 | 8.8 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-88155 | 8.8 | Oct 13 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-85900 | 8.8 | Oct 13 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-70266 | 8.8 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-69943 | 8.8 | Oct 13 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20190; 2016; 2019 |
| CVE-2026-102863 | 8.8 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-102862 | 8.8 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-102861 | 8.8 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-102860 | 8.8 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-69465 | 8.8 | Sep 8 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20074 |
| CVE-2026-69464 | 8.8 | Sep 8 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20090 |
| CVE-2026-69282 | 8.8 | Sep 8 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20090 |
| CVE-2026-69273 | 8.8 | Sep 8 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20082 |
The 500 most important CVEs for this product (exploited first, then by severity)