SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55130 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55128 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55134 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55132 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55038 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55055 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55127 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55033 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55032 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55125 | 7.8 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-44824 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-44819 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45471 | 7.8 | Jun 9 | Microsoft Word Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45475 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-26113 | 7.8 | Mar 10 | Microsoft Office Remote Code Execution Vulnerability Affected: before 16.0.19725.20076; 2016; 2019 |
| CVE-2026-20948 | 7.8 | Jan 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2026-20951 | 7.8 | Jan 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.19127.20442; 2016; 2019 |
| CVE-2025-62559 | 7.8 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-62558 | 7.8 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-62562 | 7.8 | Dec 9 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-59222 | 7.8 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-54906 | 7.8 | Sep 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-49703 | 7.8 | Jul 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2019 |
| CVE-2025-47169 | 7.8 | Jun 10 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2019 |
| CVE-2025-47168 | 7.8 | Jun 10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2019 |
| CVE-2025-30382 | 7.8 | May 13 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally Affected: before 16.0.18526.20286; 2016; 2019 |
| CVE-2025-29976 | 7.8 | May 13 | Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally Affected: before 16.0.18526.20286; 2016; 2019 |
| CVE-2025-27747 | 7.8 | Apr 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2019 |
| CVE-2025-27746 | 7.8 | Apr 8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: before 16.0.10417.20003 |
| CVE-2025-26642 | 7.8 | Apr 8 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2019 |
| CVE-2025-21344 | 7.8 | Jan 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.17928.20356; 2016; 2019 |
| CVE-2024-43503 | 7.8 | Oct 8 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 2016; 2019 |
| CVE-2024-30100 | 7.8 | Jun 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.17328.20362; 2016; 2019 |
| CVE-2024-21426 | 7.8 | Mar 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2022-41061 | 7.8 | Nov 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2021-40486 | 7.8 | Oct 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2021-28453 | 7.8 | Apr 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 2010; 2013; 2016; 2019 |
| CVE-2021-1716 | 7.8 | Jan 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2010; 2019 |
| CVE-2021-1715 | 7.8 | Jan 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2010; 2019 |
| CVE-2020-17122 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2020-16929 | 7.8 | Oct 16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010 |
| CVE-2020-1338 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2019 |
| CVE-2020-1335 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2019 |
| CVE-2020-1218 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2010; 2019 |
| CVE-2020-0980 | 7.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2019 |
| CVE-2020-0892 | 7.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2019 |
| CVE-2020-0852 | 7.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2019 |
| CVE-2019-1201 | 7.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2010; 2019 |
| CVE-2019-1035 | 7.8 | Jun 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2019 |
| CVE-2019-1034 | 7.8 | Jun 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2010; 2019 |
The 500 most important CVEs for this product (exploited first, then by severity)