Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- High8.8Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.91%Sep 8, 2026
- Medium5.4CVE-2026-69417 is listed by inventory_critical.Check if you run itEPSS 0.45%Sep 8, 2026
- Medium6.5Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.00%Sep 8, 2026
- Medium5.4CVE-2026-69402 is listed by inventory_critical.Check if you run itEPSS 0.45%Sep 8, 2026
- High8.8CVE-2026-69282 is listed by Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 0.78%Sep 8, 2026
- High8.8CVE-2026-69273 is listed by Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 0.78%Sep 8, 2026
- High8.8CVE-2026-69268 is listed by Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 0.78%Sep 8, 2026
- UnknownCVE-2026-70306 - Security Update Guide - Microsoft - Microsoft Office SharePoint Spoofing VulnerabilityCheck if you run itEPSS 1.01%Aug 12, 2026
- High8.7Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges…Check if you run itEPSS 0.78%Aug 11, 2026
- High8.8CVE-2026-70326 is listed by Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network..Check if you run itEPSS 0.78%Aug 11, 2026
- High8.8CVE-2026-70324 is listed by Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network..Check if you run itEPSS 0.94%Aug 11, 2026
- High8.8CVE-2026-70321 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 1.69%Aug 11, 2026
- High8.8CVE-2026-66808 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 2.04%Aug 11, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 2.04%Aug 11, 2026
- High8.8CVE-2026-65665 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 1.69%Aug 11, 2026
- High8.8CVE-2026-65663 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 2.04%Aug 11, 2026
- High8.8CVE-2026-65658 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 2.04%Aug 11, 2026
- Medium5.4CVE-2026-64922 is listed by inventory_critical.Check if you run itEPSS 0.58%Aug 11, 2026
- High8.8Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.94%Aug 11, 2026
- Medium5.4CVE-2026-64916 is listed by inventory_critical.Check if you run itEPSS 0.58%Aug 11, 2026
- Medium5.4CVE-2026-64902 is listed by inventory_critical.Check if you run itEPSS 0.58%Aug 11, 2026
- High8.8CVE-2026-64901 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 2.04%Aug 11, 2026
- Medium5.4CVE-2026-64900 is listed by inventory_critical.Check if you run itEPSS 0.65%Aug 11, 2026
- Medium5.4CVE-2026-64897 is listed by inventory_critical.Check if you run itEPSS 0.58%Aug 11, 2026
- High8.1Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)Patch nowKEVEPSS 0.96%Aug 11, 2026