Microsoft SharePoint vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
494 matching records
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 29.20%Jan 13, 2026
- Critical9.0Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…Check if you run itEPSS 1.02%Dec 9, 2025
- High7.8Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.81%Dec 9, 2025
- Critical9.8Microsoft SharePoint Online Elevation of Privilege VulnerabilityCheck if you run itEPSS 1.13%Nov 20, 2025
- High8.0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 2.21%Nov 11, 2025
- High8.8CVE-2025-59237 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 2.46%Oct 14, 2025
- High8.8CVE-2025-59228 is listed by Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 1.36%Oct 14, 2025
- High7.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.65%Oct 14, 2025
- High8.8CVE-2025-54897 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check this weekEPSS 21.75%Sep 9, 2025
- High7.1Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check this weekEPSS 19.53%Aug 12, 2025
- High8.8CVE-2025-49712 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check this weekEPSS 21.33%Aug 12, 2025
- UnknownCVE-2024-38018 is named in a Cloudflare managed-rules release.Check this weekEPSS 51.18%Aug 11, 2025
- Medium6.5Microsoft SharePoint Improper AuthenticationPatch nowKEVEPSS 99.89%Jul 18, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2025
- High8.8Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.29%Jul 8, 2025
- Medium6.5Microsoft SharePoint Improper Authentication VulnerabilityPatch nowKEVEPSS 99.06%Jul 8, 2025
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 100.00%Jul 8, 2025
- High8.8Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.75%Jun 10, 2025
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check this weekEPSS 21.64%Jun 10, 2025
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check this weekEPSS 20.92%Jun 10, 2025
- High7.4Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.Check if you run itEPSS 1.39%May 13, 2025
- High7.8Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.Check if you run itEPSS 2.61%May 13, 2025
- High7.0Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.Check if you run itEPSS 1.42%May 13, 2025
- High7.8Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.64%May 13, 2025
- High8.8CVE-2025-29794 is listed by Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 4.85%Apr 8, 2025