Microsoft Sharepoint Server vulnerabilities, page 2
630 vulnerabilities
Known vulnerabilities in Microsoft Sharepoint Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-70251microsoftmicrosoft sharepoint server subscription edition+1
EPSS score0.54%
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70246microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.75%
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70217microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.86%
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-70202microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.51%
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-69943microsoftmicrosoft sharepoint enterprise server 2016+3EPSS score0.98%
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-105720microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.43%
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-105719microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.96%
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-105713microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.37%
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.CVE-2026-105013microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.84%
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-102866microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.54%
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.CVE-2026-102865microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.77%
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-102864microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.36%
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.CVE-2026-102863microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.89%
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102862microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.70%
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102861microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.70%
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102860microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.70%
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-102859microsoftmicrosoft sharepoint server subscription edition+1EPSS score0.36%
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.CVE-2018-0864microsoftsharepoint_serverEPSS score2.57%
SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability".CVE-2018-0789microsoft corporationmicrosoft sharepoint server+2EPSS score6.37%
Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790.CVE-2018-0919microsoft corporationmicrosoft office+7EPSS score11.66%
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2010 SP2, Word 2013 SP1 and Microsoft Word 2016 allow an information disclosure vulnerability due to how variables are initialized, aka "Microsoft Office Information Disclosure Vulnerability".