Microsoft Sharepoint Enterprise Server vulnerabilities, page 4
256 vulnerabilities
Known vulnerabilities in Microsoft Sharepoint Enterprise Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2021-31948microsoft · microsoft sharepoint enterprise server 2016 +5 moreMicrosoft SharePoint Server Spoofing VulnerabilityEPSS1.29%HighCVE-2021-36940microsoft · microsoft sharepoint enterprise server 2013 service pack 1 +4 moreMicrosoft SharePoint Server Spoofing VulnerabilityEPSS4.04%HighCVE-2021-43242microsoft · microsoft sharepoint enterprise server 2016 +6 moreMicrosoft SharePoint Server Spoofing VulnerabilityEPSS1.30%HighCVE-2021-43876microsoft · microsoft sharepoint enterprise server 2013 service pack 1 +4 moreMicrosoft SharePoint Elevation of Privilege VulnerabilityEPSS2.03%MediumCVE-2021-27052microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Server Information Disclosure VulnerabilityEPSS3.12%HighCVE-2021-38651microsoft · microsoft sharepoint enterprise server 2016 +5 moreMicrosoft SharePoint Server Spoofing VulnerabilityEPSS1.33%HighCVE-2021-38652microsoft · microsoft sharepoint enterprise server 2016 +3 moreMicrosoft SharePoint Server Spoofing VulnerabilityEPSS1.33%HighCVE-2021-24072microsoft · microsoft sharepoint enterprise server 2016 +5 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityEPSS2.40%MediumCVE-2021-24104microsoft · microsoft sharepoint enterprise server 2016 +5 moreMicrosoft SharePoint Server Spoofing VulnerabilityEPSS1.47%MediumCVE-2021-24071microsoft · microsoft sharepoint enterprise server 2016 +6 moreMicrosoft SharePoint Information Disclosure VulnerabilityEPSS2.70%HighCVE-2021-24066microsoft · microsoft sharepoint enterprise server 2016 +6 moreMicrosoft SharePoint Remote Code Execution VulnerabilityEPSS6.30%HighCVE-2025-54905microsoft · 365_apps +14 moreMicrosoft Word Information Disclosure VulnerabilityUntrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.EPSS0.62%HighCVE-2025-47994microsoft · 365_apps +8 moreMicrosoft Office Elevation of Privilege VulnerabilityDeserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.EPSS3.28%HighCVE-2025-47166microsoft · microsoft sharepoint enterprise server 2016 +4 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS21.64%HighCVE-2025-47172microsoft · microsoft sharepoint enterprise server 2016 +4 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityImproper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS1.75%HighCVE-2025-47168microsoft · 365_apps +14 moreMicrosoft Word Remote Code Execution VulnerabilityUse after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.EPSS0.64%HighCVE-2025-47163microsoft · microsoft sharepoint enterprise server 2016 +4 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS20.92%HighCVE-2025-47169microsoft · 365_apps +14 moreMicrosoft Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.EPSS0.65%MediumCVE-2025-53736microsoft · 365_apps +14 moreMicrosoft Word Information Disclosure VulnerabilityBuffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.EPSS0.50%HighCVE-2025-53733microsoft · 365_apps +14 moreMicrosoft Word Remote Code Execution VulnerabilityIncorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.EPSS0.55%