Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 2.29%May 12, 2026
- Medium5.4Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…Check this weekEPSS 19.07%Apr 14, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityPatch nowKEVEPSS 43.38%Apr 12, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 2.55%Mar 10, 2026
- High8.8Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.34%Mar 10, 2026
- Critical9.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing…Check if you run itEPSS 1.17%Mar 10, 2026
- Critical9.0Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…Check if you run itEPSS 1.02%Dec 9, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2025
- High8.8Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.75%Jun 10, 2025
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check this weekEPSS 21.64%Jun 10, 2025
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check this weekEPSS 20.92%Jun 10, 2025
- High7.4Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.Check if you run itEPSS 1.39%May 13, 2025
- High7.8Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.Check if you run itEPSS 2.61%May 13, 2025
- High7.8Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.64%May 13, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataPatch nowKEVEPSS 45.22%Apr 9, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataPatch nowKEVEPSS 52.90%Apr 9, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataPatch nowKEVEPSS 16.52%Jul 25, 2024
- UnknownMicrosoft SharePoint Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 55.79%Dec 20, 2023
- Critical9.8Microsoft SharePoint Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 99.98%Jun 13, 2023
- High7.2Microsoft SharePoint Server Code Injection VulnerabilityPatch nowKEVEPSS 84.97%May 9, 2023
- UnknownMicrosoft SharePoint Download of Code Without Integrity CheckPatch nowKEVEPSS 1.90%Feb 14, 2023
- UnknownMicrosoft SharePoint Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 4.42%Jan 21, 2021
- Critical9.8Microsoft SharePoint Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.91%Mar 5, 2019
- High7.8Microsoft Office Remote Code Execution VulnerabilityPatch nowKEVEPSS 81.33%Sep 28, 2017
- High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server…Check this weekEPSS 15.76%May 12, 2017