Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- High7.8CVE-2026-44819 is listed by Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.46%Jun 9, 2026
- Medium6.1CVE-2026-33113 is listed by inventory_critical.Check if you run itEPSS 0.52%Jun 9, 2026
- High8.0Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code…Check if you run itEPSS 0.61%Jun 1, 2026
- High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 80.24%May 22, 2026
- High8.0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.82%May 12, 2026
- High8.4Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.45%May 12, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.96%May 12, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.70%May 12, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 2.03%May 12, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check this weekEPSS 31.12%May 12, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.97%May 12, 2026
- Medium5.4Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…Check this weekEPSS 19.07%Apr 14, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityPatch nowKEVEPSS 43.38%Apr 12, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 3.15%Mar 10, 2026
- High7.8Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.58%Mar 10, 2026
- High8.8Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.46%Mar 10, 2026
- Critical9.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing…Check if you run itEPSS 1.23%Mar 10, 2026
- High7.5Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 3.97%Feb 10, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.52%Feb 10, 2026
- Medium5.4Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.35%Jan 13, 2026
- High7.8Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.60%Jan 13, 2026
- High8.8Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check this weekEPSS 18.44%Jan 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 7.68%Jan 13, 2026
- High7.8Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.79%Jan 13, 2026
- High7.0Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.65%Jan 13, 2026