SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8628 | 7.8 | Dec 12 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code… Affected: 2013; 2019 |
| CVE-2018-8539 | 7.8 | Nov 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: 2010 |
| CVE-2018-8161 | 7.8 | May 9 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution… Affected: 2010; 2013; 2016 |
| CVE-2018-0922 | 7.8 | Mar 14 | Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps… Affected: 2010 |
| CVE-2018-0797 | 7.8 | Jan 10 | Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word… Affected: 2010 |
| CVE-2017-8743 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle… Affected: 2016 |
| CVE-2017-8742 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1,… Affected: 2016 |
| CVE-2017-8501 | 7.8 | Jul 11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability" Affected: 2010; 2013 |
| CVE-2017-8513 | 7.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution… Affected: 2007 |
| CVE-2017-8511 | 7.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2013; 2016 |
| CVE-2017-0254 | 7.8 | May 12 | Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps… Affected: 2013; 2016 |
| CVE-2017-0281 | 7.8 | May 12 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1,… Affected: 2010; 2013; 2016 |
| CVE-2017-0052 | 7.8 | Mar 17 | Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a… Affected: 2007 |
| CVE-2017-0030 | 7.8 | Mar 17 | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on SharePoint Server 2010 SP2… Affected: 2010 |
| CVE-2017-0006 | 7.8 | Mar 17 | Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a… Affected: 2007 |
| CVE-2016-7236 | 7.8 | Nov 10 | Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted… Affected: 2010 |
| CVE-2016-7234 | 7.8 | Nov 10 | Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Excel for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: 2010; 2013 |
| CVE-2016-3282 | 7.8 | Jul 13 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: 2010; 2013; 2016 |
| CVE-2016-3281 | 7.8 | Jul 13 | Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation Services on SharePoint Server 2010 SP2,… Affected: 2010 |
| CVE-2016-0140 | 7.8 | May 11 | Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code… Affected: 2010 |
| CVE-2016-0127 | 7.8 | Apr 12 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server… Affected: 2010; 2013 |
| CVE-2016-0134 | 7.8 | Mar 9 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: 2010; 2013 |
| CVE-2016-0054 | 7.8 | Feb 10 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel… Affected: 2013 |
| CVE-2016-0053 | 7.8 | Feb 10 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on… Affected: 2013 |
| CVE-2016-0052 | 7.8 | Feb 10 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: 2013 |
| CVE-2016-0022 | 7.8 | Feb 10 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: 2013 |
| CVE-2026-69683 | 7.7 | Sep 8 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20082 |
| CVE-2021-40484 | 7.6 | Oct 13 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2021-40483 | 7.6 | Oct 13 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2021-38651 | 7.6 | Sep 15 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2021-36940 | 7.6 | Aug 12 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2021-31964 | 7.6 | Jun 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016; 2019 |
| CVE-2021-31950 | 7.6 | Jun 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016; 2019 |
| CVE-2021-31948 | 7.6 | Jun 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2021-28478 | 7.6 | May 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016; 2019 |
| CVE-2026-88206 | 7.5 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-70202 | 7.5 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-70251 | 7.5 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-69804 | 7.5 | Sep 8 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20090 |
| CVE-2026-21511 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: before 16.0.19127.20518; 2016; 2019 |
| CVE-2026-21260 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: before 16.0.19127.20518; 2016; 2019 |
| CVE-2024-43466 | 7.5 | Sep 10 | Microsoft SharePoint Server Denial of Service Vulnerability Affected: 2016; 2019 |
| CVE-2024-32987 | 7.5 | Jul 9 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 2016; 2019 |
| CVE-2024-30043 | 7.5 | May 14 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: before 16.0.17328.20292; 2016; 2019 |
| CVE-2023-33165 | 7.5 | Jul 11 | Microsoft SharePoint Server Security Feature Bypass Vulnerability Affected: 2019 |
| CVE-2019-1006 | 7.5 | Jul 15 | An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary… Affected: 2019 |
| CVE-2026-105013 | 7.4 | Oct 13 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2024-49070 | 7.4 | Dec 12 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2020-1345 | 7.4 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-1198 | 7.4 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
The 500 most important CVEs for this product (exploited first, then by severity)