Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- Medium6.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.91%Jul 14, 2026
- High8.4Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.45%Jul 14, 2026
- High7.8CVE-2026-55038 is listed by Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.57%Jul 14, 2026
- Low3.3CVE-2026-55035 is listed by Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally..Check if you run itEPSS 0.57%Jul 14, 2026
- High8.7CVE-2026-55034 is listed by inventory_critical.Check if you run itEPSS 0.95%Jul 14, 2026
- High7.8Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.57%Jul 14, 2026
- High7.8CVE-2026-55032 is listed by Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.57%Jul 14, 2026
- Medium5.4CVE-2026-55030 is listed by inventory_critical.Check if you run itEPSS 0.58%Jul 14, 2026
- Medium5.5CVE-2026-55028 is listed by Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally..Check if you run itEPSS 0.60%Jul 14, 2026
- Medium5.5CVE-2026-55027 is listed by Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally..Check if you run itEPSS 0.60%Jul 14, 2026
- Medium5.5Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.45%Jul 14, 2026
- Medium5.5CVE-2026-55023 is listed by Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally..Check if you run itEPSS 0.60%Jul 14, 2026
- High8.7CVE-2026-55021 is listed by inventory_critical.Check if you run itEPSS 0.95%Jul 14, 2026
- Medium5.4CVE-2026-55020 is listed by inventory_critical.Check if you run itEPSS 0.58%Jul 14, 2026
- Medium5.4CVE-2026-55019 is listed by inventory_critical.Check if you run itEPSS 0.58%Jul 14, 2026
- Medium5.4CVE-2026-55016 is listed by inventory_critical.Check if you run itEPSS 0.58%Jul 14, 2026
- Medium6.5External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 1.08%Jul 14, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityPatch nowKEVEPSS 69.54%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 3.04%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 15.87%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.01%Jul 14, 2026
- UnknownMicrosoft SharePoint Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 15.17%Jun 24, 2026
- Medium4.6CVE-2026-48562 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.94%Jun 9, 2026
- Medium5.4Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.51%Jun 9, 2026