SH
Collaboration
SharePoint
On CISA KEVExploited in the wildRansomware-linked
632
CVEs
20
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 16High 316Medium 168Low 0
Watch
Add SharePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32201 In wildKEV | 6.5 | Apr 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20210; 2016; 2019 |
| CVE-2025-49706 RansomwareIn wildKEV | 6.5 | Jul 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.18526.20424; 2019 |
| CVE-2026-97782 | 6.8 | Oct 13 | Microsoft Office SharePoint Tampering Vulnerability Affected: All versions, or not specified |
| CVE-2023-38177 | 6.8 | Nov 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2026-85932 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-70298 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-70259 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-105719 | 6.5 | Oct 13 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-102865 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2026-69636 | 6.5 | Sep 8 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20082 |
| CVE-2026-69409 | 6.5 | Sep 8 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: before 16.0.20326.20090 |
| CVE-2026-62839 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-58639 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-63516 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-63512 | 6.5 | Aug 11 | Microsoft SharePoint Server Tampering Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-62837 | 6.5 | Aug 11 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: before 16.0.19725.20522; 2016; 2019 |
| CVE-2026-55051 | 6.5 | Jul 14 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2026-54108 | 6.5 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20434; 2016; 2019 |
| CVE-2025-53771 | 6.5 | Jul 20 | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network Affected: before 16.0.18526.20508; 2016; 2019 |
| CVE-2024-49064 | 6.5 | Dec 12 | Microsoft SharePoint Information Disclosure Vulnerability Affected: 2016; 2019 |
| CVE-2024-49062 | 6.5 | Dec 12 | Microsoft SharePoint Information Disclosure Vulnerability Affected: 2016; 2019 |
| CVE-2023-36894 | 6.5 | Aug 8 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 2016; 2019 |
| CVE-2023-36890 | 6.5 | Aug 8 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 2019 |
| CVE-2023-33142 | 6.5 | Jun 14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2023-33129 | 6.5 | Jun 14 | Microsoft SharePoint Server Denial of Service Vulnerability Affected: 2019 |
| CVE-2023-24954 | 6.5 | May 9 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 2019 |
| CVE-2023-24950 | 6.5 | May 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2022-41122 | 6.5 | Nov 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2020-16953 | 6.5 | Oct 16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2010; 2019 |
| CVE-2020-16948 | 6.5 | Oct 16 | <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory Affected: 2019 |
| CVE-2020-1103 | 6.5 | May 21 | An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of… Affected: 2019 |
| CVE-2019-1443 | 6.5 | Nov 12 | An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who… Affected: 2019 |
| CVE-2019-1260 | 6.5 | Sep 11 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability' Affected: 2019 |
| CVE-2018-8160 | 6.5 | May 9 | An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft… Affected: 2010 |
| CVE-2016-7233 | 6.5 | Nov 10 | Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint… Affected: 2013 |
| CVE-2025-21393 | 6.3 | Jan 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.17928.20356; 2016; 2019 |
| CVE-2023-33132 | 6.3 | Jun 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2020-1482 | 6.3 | Sep 11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2020-1440 | 6.3 | Sep 11 | <p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data Affected: 2010; 2019 |
| CVE-2025-53736 | 6.2 | Aug 12 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally Affected: 2019 |
| CVE-2026-97783 | 6.1 | Oct 13 | Microsoft Office SharePoint Spoofing Vulnerability Affected: 2019 |
| CVE-2026-33113 | 6.1 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: before 16.0.19725.20384; 2016; 2019 |
| CVE-2020-1323 | 6.1 | Jun 9 | An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted… Affected: 2013; 2019 |
| CVE-2020-1106 | 6.1 | May 21 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server Affected: 2019 |
| CVE-2015-6117 | 6.1 | Jan 13 | Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct… Affected: 2013 |
| CVE-2026-105713 | 5.7 | Oct 13 | Microsoft Office SharePoint Spoofing Vulnerability Affected: before 16.0.20326.20190 |
| CVE-2021-43242 | 5.7 | Dec 15 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2021-42320 | 5.7 | Dec 15 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 2019 |
| CVE-2021-31965 | 5.7 | Jun 8 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 2016; 2019 |
| CVE-2019-0950 | 5.7 | May 16 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft… Affected: 2016 |
The 500 most important CVEs for this product (exploited first, then by severity)