SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-53760 | 7.1 | Aug 12 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network Affected: before 16.0.18526.20518; 2016; 2019 |
| CVE-2021-34467 | 7.1 | Jul 16 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2021-34468 | 7.1 | Jul 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2021-31963 | 7.1 | Jun 8 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2019 |
| CVE-2021-26420 | 7.1 | Jun 8 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2021-31172 | 7.1 | May 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2016; 2019 |
| CVE-2020-17089 | 7.1 | Dec 10 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 2016; 2019 |
| CVE-2016-7291 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2010 |
| CVE-2016-7290 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2010 |
| CVE-2016-7268 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and… Affected: 2010 |
| CVE-2016-7265 | 7.1 | Dec 20 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3,… Affected: 2007; 2010 |
| CVE-2026-20943 | 7.0 | Jan 13 | Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally Affected: before 16.0.19127.20442; 2016; 2019 |
| CVE-2025-62555 | 7.0 | Dec 9 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2019 |
| CVE-2025-59221 | 7.0 | Oct 14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2019 |
| CVE-2025-30384 | 7.0 | May 13 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally Affected: before 16.0.18526.20286; 2016; 2019 |
| CVE-2025-30378 | 7.0 | May 13 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally Affected: before 16.0.18526.20286; 2016; 2019 |
The 500 most important CVEs for this product (exploited first, then by severity)