Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.EPSS 1.0%Oct 13, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 1.5%Oct 13, 2026
- Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.EPSS 1.1%Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- Medium4.9Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.EPSS 0.9%Oct 13, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.5%Oct 13, 2026
- High7.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High7.7ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilitySep 16, 2026
- UnknownRapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)EPSS 1.0%Aug 24, 2026
- High8.8Microsoft SharePoint Code Injection VulnerabilityKEVEPSS 2.1%Aug 11, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityKEVEPSS 69.5%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 15.9%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 3.0%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 1.0%Jul 14, 2026
- High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityKEVEPSS 2.7%May 22, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityKEVEPSS 43.4%Apr 14, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Mar 10, 2026
- High8.8Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Mar 10, 2026
- Critical9.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing…Mar 10, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 29.2%Jan 13, 2026