Microsoft SharePoint
Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
27 matching records
- High8.1Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)Vuln · CVE-2026-63520 · microsoft · sharepoint server · CVE.org · FIRST EPSS · Monitored products — critical · Microsoft, Microsoft 365Patch nowKEVEPSS 0.96%Aug 11, 2026
- High8.8Microsoft SharePoint Code Injection VulnerabilityVuln · CVE-2026-65660 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 8.19%Aug 11, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityVuln · CVE-2026-55040 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 69.54%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityVuln · CVE-2026-50522 · Cloudflare · sharepoint server · CISA KEV · Cloudflare WAF rules · CVE.org · Microsoft, SharePointPatch nowKEVEPSS 3.04%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityVuln · CVE-2026-58644 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 15.87%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityVuln · CVE-2026-56164 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 1.01%Jul 14, 2026
- UnknownMicrosoft SharePoint Server Remote Code Execution VulnerabilityVuln · CVE-2021-27076 · Microsoft · business_productivity_servers · CVE.org · FIRST EPSS · Monitored products — critical · Microsoft, SharePointPatch nowKEVEPSS 15.17%Jun 24, 2026
- High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityVuln · CVE-2026-45659 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 80.24%May 22, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityVuln · CVE-2026-32201 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 43.38%Apr 12, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityVuln · CVE-2026-20963 · Microsoft · Microsoft SharePoint Server 2019 · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 29.20%Jan 13, 2026
- Medium6.5Microsoft SharePoint Improper AuthenticationVuln · CVE-2025-53771 · Cloudflare · sharepoint server · Cloudflare WAF rules · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 99.89%Jul 18, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityVuln · CVE-2025-53770 · Cloudflare · Microsoft SharePoint Server 2019 · CISA KEV · Cloudflare WAF rules · CVE.org · Microsoft, SharePointPatch nowKEVEPSS 100.00%Jul 18, 2025
- Medium6.5Microsoft SharePoint Improper Authentication VulnerabilityVuln · CVE-2025-49706 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 99.06%Jul 8, 2025
- High8.8Microsoft SharePoint Code Injection VulnerabilityVuln · CVE-2025-49704 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 100.00%Jul 8, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataVuln · CVE-2024-38024 · Cloudflare · SharePoint · Cloudflare WAF rules · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 45.22%Jan 6, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataVuln · CVE-2024-38023 · Cloudflare · SharePoint · Cloudflare WAF rules · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 52.90%Jan 6, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataVuln · CVE-2022-22005 · Microsoft · SharePoint · CVE.org · FIRST EPSS · Monitored products — critical · Microsoft, SharePointPatch nowKEVEPSS 16.52%Jul 25, 2024
- High7.2Microsoft SharePoint Deserialization VulnerabilityVuln · CVE-2024-38094 · Cloudflare · SharePoint · AttackerKB · CISA KEV · Cloudflare WAF rules · Microsoft, SharePointPatch nowKEVEPSS 50.89%Jul 9, 2024
- UnknownMicrosoft SharePoint Server Remote Code Execution VulnerabilityVuln · CVE-2023-21742 · Microsoft · SharePoint · CVE.org · FIRST EPSS · Monitored products — critical · Microsoft, SharePointPatch nowKEVEPSS 55.79%Dec 20, 2023
- Critical9.8Microsoft SharePoint Server Privilege Escalation VulnerabilityVuln · CVE-2023-29357 · Microsoft · SharePoint · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 99.98%Jun 13, 2023
- High7.2Microsoft SharePoint Server Code Injection VulnerabilityVuln · CVE-2023-24955 · Microsoft · SharePoint · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 84.97%May 9, 2023
- UnknownMicrosoft SharePoint Download of Code Without Integrity CheckVuln · CVE-2020-1210 · Microsoft · SharePoint · CVE.org · FIRST EPSS · Monitored products — critical · Microsoft, SharePointPatch nowKEVEPSS 1.90%Feb 14, 2023
- High7.8Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution VulnerabilityVuln · CVE-2020-1147 · microsoft · .net core · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 95.80%Jul 14, 2020
- Critical9.8Microsoft SharePoint Remote Code Execution VulnerabilityVuln · CVE-2019-0604 · Microsoft · SharePoint · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 99.91%Mar 5, 2019
- Medium4.3Microsoft SharePoint Exposure of Sensitive Information to an Unauthorized ActorVuln · CVE-2018-8580 · microsoft · sharepoint server · CVE.org · FIRST EPSS · Monitored products — critical · Microsoft, SharePointPatch nowKEVEPSS 4.42%Dec 12, 2018
