Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- Medium5.4CVE-2026-47640 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47639 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47638 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47637 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47636 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perf…Check if you run itEPSS 0.56%Jun 9, 2026
- High8.0Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.67%Jun 9, 2026
- Low3.3CVE-2026-45485 is listed by Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally..Check if you run itEPSS 0.44%Jun 9, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check this weekEPSS 35.22%Jun 9, 2026
- Medium5.4Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server allows an authorized attacker to perform spoofi…Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-45481 is listed by inventory_critical.Check if you run itEPSS 0.69%Jun 9, 2026
- Medium5.4CVE-2026-45479 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- High7.8CVE-2026-45475 is listed by Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.46%Jun 9, 2026
- High7.8Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.46%Jun 9, 2026
- Medium5.4CVE-2026-45468 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-45467 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-45465 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-45464 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-45462 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- High8.4Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.44%Jun 9, 2026
- High8.4Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.44%Jun 9, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.63%Jun 9, 2026
- Medium5.4CVE-2026-45453 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- High7.8CVE-2026-44824 is listed by Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.46%Jun 9, 2026
- Medium5.5CVE-2026-44821 is listed by Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally..Check if you run itEPSS 0.46%Jun 9, 2026