SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22716 | 5.5 | Feb 9 | Microsoft Excel Information Disclosure Vulnerability Affected: 2013 |
| CVE-2020-1573 | 5.5 | Aug 17 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-1505 | 5.5 | Aug 17 | An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2010; 2019 |
| CVE-2020-1503 | 5.5 | Aug 17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory Affected: 2010; 2019 |
| CVE-2020-1502 | 5.5 | Aug 17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory Affected: 2019 |
| CVE-2020-1342 | 5.5 | Jul 14 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: 2010; 2019 |
| CVE-2019-1442 | 5.5 | Nov 12 | A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim… Affected: 2019 |
| CVE-2019-0561 | 5.5 | Jan 8 | An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects… Affected: 2010 |
| CVE-2018-8627 | 5.5 | Dec 12 | An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: 2010 |
| CVE-2018-8378 | 5.5 | Aug 15 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: Enterprise Server 2013 Service Pack 1; Enterprise Server 2016 |
| CVE-2017-0105 | 5.5 | Mar 17 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2010 |
| CVE-2016-3279 | 5.5 | Jul 13 | Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word… Affected: 2010 |
| CVE-2016-3234 | 5.5 | Jun 16 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation… Affected: 2010; 2013 |
| CVE-2026-69417 | 5.4 | Sep 8 | Microsoft Office SharePoint Spoofing Vulnerability Affected: before 16.0.20326.20090 |
| CVE-2026-69402 | 5.4 | Sep 8 | Microsoft Office SharePoint Spoofing Vulnerability Affected: before 16.0.20326.20090 |
| CVE-2026-69690 | 5.4 | Sep 8 | Microsoft Office SharePoint Spoofing Vulnerability Affected: before 16.0.20326.20090 |
| CVE-2026-64916 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-64902 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-64900 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-64897 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-64922 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-62829 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2019 |
| CVE-2026-57105 | 5.4 | Aug 11 | Microsoft Office SharePoint Spoofing Vulnerability Affected: before 16.0.19725.20522; 2019 |
| CVE-2026-62826 | 5.4 | Jul 16 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-56157 | 5.4 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55135 | 5.4 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55126 | 5.4 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55030 | 5.4 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55020 | 5.4 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55019 | 5.4 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-55016 | 5.4 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-48560 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45481 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47640 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47634 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2019 |
| CVE-2026-45465 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45464 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45462 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47641 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47639 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47638 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47637 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-47636 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45453 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45483 | 5.4 | Jun 9 | Microsoft Office Project Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45479 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45468 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-45467 | 5.4 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2026-20945 | 5.4 | Apr 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20210; 2016; 2019 |
| CVE-2026-20959 | 5.4 | Jan 13 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a… Affected: before 16.0.19127.20442; 2016; 2019 |
The 500 most important CVEs for this product (exploited first, then by severity)