SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58644 In wildKEV | 9.8 | Jul 14 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-50522 In wildKEV | 9.8 | Jul 14 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-56164 In wildKEV | 9.8 | Jul 14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-20963 In wildKEV | 9.8 | Jan 13 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: before 16.0.19127.20442; 2016; 2019 |
| CVE-2025-53770 RansomwareIn wildKEV | 9.8 | Jul 20 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: before 16.0.18526.20508; 2016; 2019 |
| CVE-2023-29357 RansomwareIn wildKEV | 9.8 | Jun 13 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2019-0604 RansomwareIn wildKEV | 9.8 | Mar 5 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 2010; 2019 |
| CVE-2026-55040 In wildKEV | 9.1 | Jul 14 | Microsoft SharePoint Server Security Feature Bypass Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2020-1595 | 9.9 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input Affected: 2019 |
| CVE-2020-1210 | 9.9 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package Affected: 2019 |
| CVE-2023-21716 | 9.8 | Feb 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2020-1025 | 9.8 | Jul 14 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation Affected: 2019 |
| CVE-2019-1205 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2019 |
| CVE-2026-70306 | 9.3 | Aug 11 | Microsoft Office SharePoint Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-26105 | 9.3 | Mar 10 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a… Affected: before 16.0.19725.20076; 2016; 2019 |
| CVE-2025-64672 | 9.0 | Dec 9 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a… Affected: before 16.0.19127.20378 |
Showing 16
The 500 most important CVEs for this product (exploited first, then by severity)