Microsoft Sharepoint Server 2019 vulnerabilities, page 3
354 vulnerabilities
Known vulnerabilities in Microsoft Sharepoint Server 2019, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-28474microsoftmicrosoft sharepoint enterprise server 2016+4
EPSS score50.77%
Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-28453microsoft365_apps+20EPSS score4.05%
Microsoft Word Remote Code Execution VulnerabilityCVE-2021-28450microsoftmicrosoft sharepoint enterprise server 2013 service pack 1+5EPSS score2.40%
Microsoft SharePoint Denial of Service VulnerabilityCVE-2021-28478microsoftmicrosoft sharepoint enterprise server 2016+4EPSS score1.57%
Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-34468microsoftmicrosoft sharepoint enterprise server 2016+4EPSS score2.15%
Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-34467microsoftmicrosoft sharepoint enterprise server 2016+4EPSS score6.59%
Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-34520microsoftmicrosoft sharepoint enterprise server 2016+4EPSS score4.42%
Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-34517microsoftmicrosoft sharepoint enterprise server 2013 service pack 1+5EPSS score1.97%
Microsoft SharePoint Server Spoofing VulnerabilityCVE-2025-21400microsoftmicrosoft sharepoint enterprise server 2016+3EPSS score34.49%
Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2025-21348microsoftmicrosoft sharepoint enterprise server 2016+3EPSS score1.81%
Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2025-21393microsoftmicrosoft sharepoint enterprise server 2016+3EPSS score1.08%
Microsoft SharePoint Server Spoofing VulnerabilityCVE-2025-21344microsoftmicrosoft sharepoint enterprise server 2016+3EPSS score0.84%
Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2025-54897microsoftmicrosoft sharepoint enterprise server 2016+3EPSS score21.75%
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2025-54905microsoft365_apps+14EPSS score0.62%
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2025-54906microsoft365_apps+12EPSS score0.70%
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-59237microsoftmicrosoft sharepoint enterprise server 2016+3EPSS score2.48%
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2025-59235microsoft365_apps+17EPSS score0.66%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2025-59232microsoft365_apps+17EPSS score0.48%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2025-59228microsoftmicrosoft sharepoint enterprise server 2016+3EPSS score1.37%
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2025-59221microsoft365_apps+13EPSS score0.39%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.