Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- Medium6.5Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 1.87%Aug 11, 2026
- High8.8CVE-2026-63514 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 2.04%Aug 11, 2026
- Medium6.5Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.Check if you run itEPSS 0.73%Aug 11, 2026
- Medium4.6Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.58%Aug 11, 2026
- Medium6.5Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.91%Aug 11, 2026
- Medium6.5Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.23%Aug 11, 2026
- Medium5.4CVE-2026-62829 is listed by inventory_critical.Check if you run itEPSS 0.47%Aug 11, 2026
- High8.8Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.94%Aug 11, 2026
- Medium6.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.91%Aug 11, 2026
- Medium5.4CVE-2026-57105 is listed by inventory_critical.Check if you run itEPSS 0.62%Aug 11, 2026
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 8.19%Aug 11, 2026
- Medium5.4CVE-2026-62826 is listed by inventory_critical.Check if you run itEPSS 0.58%Jul 16, 2026
- High8.8Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.94%Jul 14, 2026
- Medium5.5CVE-2026-56192 is listed by Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally..Check if you run itEPSS 0.60%Jul 14, 2026
- Medium5.4Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.50%Jul 14, 2026
- Medium5.5Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.60%Jul 14, 2026
- Medium5.4CVE-2026-55135 is listed by inventory_critical.Check if you run itEPSS 0.58%Jul 14, 2026
- High7.8CVE-2026-55134 is listed by Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.57%Jul 14, 2026
- High7.8Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.57%Jul 14, 2026
- High7.8CVE-2026-55130 is listed by Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.57%Jul 14, 2026
- Medium5.4CVE-2026-55126 is listed by inventory_critical.Check if you run itEPSS 0.65%Jul 14, 2026
- High7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.57%Jul 14, 2026
- Medium5.5CVE-2026-55121 is listed by Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally..Check if you run itEPSS 0.51%Jul 14, 2026
- High7.8CVE-2026-55055 is listed by Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.57%Jul 14, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.94%Jul 14, 2026