SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88204 | 7.3 | Oct 13 | Microsoft Office SharePoint Spoofing Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2023-36762 | 7.3 | Sep 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2023-33130 | 7.3 | Jun 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2016-0025 | 7.3 | Jun 16 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack… Affected: 2010; 2013 |
| CVE-2026-70267 | 7.2 | Oct 13 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2025-29793 | 7.2 | Apr 8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network Affected: before 16.0.18526.20172; 2019 |
| CVE-2025-21348 | 7.2 | Jan 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.17928.20356; 2016; 2019 |
| CVE-2024-38228 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2024-38227 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2024-43464 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2024-38024 | 7.2 | Jul 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2024-38023 | 7.2 | Jul 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2024-30044 | 7.2 | May 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.17328.20292; 2016; 2019 |
| CVE-2021-42294 | 7.2 | Dec 15 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2021-31966 | 7.2 | Jun 8 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2019 |
| CVE-2025-59232 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2019 |
| CVE-2025-59235 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2019 |
| CVE-2025-54905 | 7.1 | Sep 9 | Microsoft Word Information Disclosure Vulnerability Affected: 2019 |
| CVE-2025-53760 | 7.1 | Aug 12 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: before 16.0.18526.20518; 2016; 2019 |
| CVE-2021-34467 | 7.1 | Jul 16 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2021-34468 | 7.1 | Jul 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2021-31963 | 7.1 | Jun 8 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2019 |
| CVE-2021-26420 | 7.1 | Jun 8 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2021-31172 | 7.1 | May 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016; 2019 |
| CVE-2020-17089 | 7.1 | Dec 10 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 2016; 2019 |
| CVE-2016-7291 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2010 |
| CVE-2016-7290 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2010 |
| CVE-2016-7268 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and… Affected: 2010 |
| CVE-2016-7265 | 7.1 | Dec 20 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3,… Affected: 2007; 2010 |
| CVE-2026-20943 | 7.0 | Jan 13 | Microsoft Office Click-To-Run Remote Code Execution Vulnerability Affected: before 16.0.19127.20442; 2016; 2019 |
| CVE-2025-62555 | 7.0 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-59221 | 7.0 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-30384 | 7.0 | May 13 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally Affected: before 16.0.18526.20286; 2016; 2019 |
| CVE-2025-30378 | 7.0 | May 13 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally Affected: before 16.0.18526.20286; 2016; 2019 |
| CVE-2026-97782 | 6.8 | Oct 13 | Microsoft Office SharePoint Tampering Vulnerability Affected: All versions, or not specified |
| CVE-2023-38177 | 6.8 | Nov 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2026-85932 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-70298 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-70259 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-105719 | 6.5 | Oct 13 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-102865 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-69636 | 6.5 | Sep 8 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20082 |
| CVE-2026-69409 | 6.5 | Sep 8 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20090 |
| CVE-2026-62839 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-58639 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-63516 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-63512 | 6.5 | Aug 11 | Microsoft SharePoint Server Tampering Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-62837 | 6.5 | Aug 11 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-55051 | 6.5 | Jul 14 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-54108 | 6.5 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
The 500 most important CVEs for this product (exploited first, then by severity)