SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1453 | 8.6 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2019 |
| CVE-2020-1452 | 8.6 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2019 |
| CVE-2020-1200 | 8.6 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2019 |
| CVE-2020-1576 | 8.5 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2010; 2019 |
| CVE-2026-55045 | 8.4 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-45458 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45456 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-40367 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20280; 2016; 2019 |
| CVE-2025-53733 | 8.4 | Aug 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2024-49068 | 8.2 | Dec 12 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 2016; 2019 |
| CVE-2026-102866 | 8.1 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-63520 | 8.1 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2023-28288 | 8.1 | Apr 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2013; 2016; 2019 |
| CVE-2021-41344 | 8.1 | Oct 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2021-40487 | 8.1 | Oct 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2021-34520 | 8.1 | Jul 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2020-17118 | 8.1 | Dec 10 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2018-8284 | 8.1 | Jul 11 | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This… Affected: 2010; 2013 |
| CVE-2026-47298 | 8.0 | Jun 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47294 | 8.0 | Jun 1 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.19725.20280; 2016; 2019 |
| CVE-2026-40368 | 8.0 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.19725.20280; 2016; 2019 |
| CVE-2025-62204 | 8.0 | Nov 11 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: before 16.0.19127.20338; 2016; 2019 |
| CVE-2025-21400 | 8.0 | Feb 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.17928.20396; 2016; 2019 |
| CVE-2023-36892 | 8.0 | Aug 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2023-36891 | 8.0 | Aug 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2022-24472 | 8.0 | Apr 15 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016; 2016; 2019 |
| CVE-2022-21987 | 8.0 | Feb 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2021-1726 | 8.0 | Feb 25 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2021-1719 | 8.0 | Jan 12 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2021-1712 | 8.0 | Jan 12 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2020-17115 | 8.0 | Dec 10 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016; 2019 |
| CVE-2020-17016 | 8.0 | Nov 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2026-55130 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55128 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55134 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55132 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55038 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55055 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55127 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55033 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55032 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55125 | 7.8 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-44824 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-44819 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45471 | 7.8 | Jun 9 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45475 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-26113 | 7.8 | Mar 10 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20076; 2016; 2019 |
| CVE-2026-20948 | 7.8 | Jan 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2026-20951 | 7.8 | Jan 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.19127.20442; 2016; 2019 |
| CVE-2025-62559 | 7.8 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2019 |
The 500 most important CVEs for this product (exploited first, then by severity)