Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.57%Oct 13, 2026
- High7.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…Check if you run itEPSS 0.63%Oct 13, 2026
- High8.8Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.81%Oct 13, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.71%Oct 13, 2026
- High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.95%Oct 13, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.84%Oct 13, 2026
- High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.95%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.18%Oct 13, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.52%Oct 13, 2026
- Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.23%Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.86%Oct 13, 2026
- Medium4.9Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.97%Oct 13, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.57%Oct 13, 2026
- High7.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.95%Oct 13, 2026
- High7.7ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityCheck if you run itEPSS 0.41%Sep 16, 2026
- UnknownCVE-2026-69465 — Guia de Atualizações de Segurança — Microsoft - Vulnerabilidade de execução remota de código em Microsoft Office SharePointCheck if you run itEPSS 0.78%Sep 13, 2026
- Low3.5CVE-2026-69904 is listed by Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network..Check if you run itEPSS 0.58%Sep 8, 2026
- High7.5Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.51%Sep 8, 2026
- High8.8CVE-2026-69724 is listed by Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 0.78%Sep 8, 2026
- High8.8CVE-2026-69716 is listed by inventory_critical.Check if you run itEPSS 0.99%Sep 8, 2026
- Medium5.4CVE-2026-69690 is listed by inventory_critical.Check if you run itEPSS 0.40%Sep 8, 2026
- High7.7CVE-2026-69683 is listed by Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network..Check if you run itEPSS 0.84%Sep 8, 2026
- Medium6.5Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose informati…Check if you run itEPSS 1.00%Sep 8, 2026
- Medium4.8CVE-2026-69615 is listed by inventory_critical.Check if you run itEPSS 0.40%Sep 8, 2026