Sharepoint Enterprise Server (Microsoft) - vulnerabilities (CVEs)

256 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2025-09-09. Vendor: Microsoft.

CVEs of Sharepoint Enterprise Server

CVE-2025-54905 - CVSS 7.1 (high), 2025-09-09: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-53733 - CVSS 8.4 (high), 2025-08-12: Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53736 - CVSS 6.8 (medium), 2025-08-12: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-49706 - CVSS 6.5 (medium), 2025-07-08: Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-47994 - CVSS 8.6 (high), 2025-07-08: Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.
CVE-2025-47172 - CVSS 8.8 (high), 2025-06-10: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute…
CVE-2025-47169 - CVSS 7.8 (high), 2025-06-10: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47168 - CVSS 7.8 (high), 2025-06-10: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47166 - CVSS 8.8 (high), 2025-06-10: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47163 - CVSS 8.8 (high), 2025-06-10: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-29820 - CVSS 7.8 (high), 2025-04-08: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-29793 - CVSS 7.2 (high), 2025-04-08: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-29794 - CVSS 8.8 (high), 2025-04-08: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-27747 - CVSS 7.8 (high), 2025-04-08: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2023-38177 - CVSS 6.8 (medium), 2023-11-14: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-24955 - CVSS 7.2 (high), 2023-05-09: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-24954 - CVSS 6.5 (medium), 2023-05-09: Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2023-24950 - CVSS 6.5 (medium), 2023-05-09: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-21717 - CVSS 8.8 (high), 2023-02-14: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-21716 - CVSS 9.8 (critical), 2023-02-14: Microsoft Word Remote Code Execution Vulnerability
CVE-2022-44693 - CVSS 8.8 (high), 2022-12-13: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41122 - CVSS 6.5 (medium), 2022-11-09: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-41103 - CVSS 5.5 (medium), 2022-11-09: Microsoft Word Information Disclosure Vulnerability
CVE-2022-41060 - CVSS 5.5 (medium), 2022-11-09: Microsoft Word Information Disclosure Vulnerability
CVE-2022-41062 - CVSS 8.8 (high), 2022-11-09: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41061 - CVSS 7.8 (high), 2022-11-09: Microsoft Word Remote Code Execution Vulnerability
CVE-2022-38053 - CVSS 8.8 (high), 2022-10-11: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38008 - CVSS 8.8 (high), 2022-09-13: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-37961 - CVSS 8.8 (high), 2022-09-13: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38009 - CVSS 8.8 (high), 2022-09-13: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-35823 - CVSS 8.8 (high), 2022-09-13: Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2022-29108 - CVSS 8.8 (high), 2022-05-10: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-22005 - CVSS 8.8 (high), 2022-02-09: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-21968 - CVSS 4.3 (medium), 2022-02-09: Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2022-21987 - CVSS 8 (high), 2022-02-09: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-21842 - CVSS 7.8 (high), 2022-01-11: Microsoft Word Remote Code Execution Vulnerability
CVE-2022-21840 - CVSS 8.8 (high), 2022-01-11: Microsoft Office Remote Code Execution Vulnerability
CVE-2021-43876 - CVSS 8.8 (high), 2021-12-29: Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2021-43242 - CVSS 7.6 (high), 2021-12-15: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-42320 - CVSS 8 (high), 2021-12-15: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-42294 - CVSS 7.2 (high), 2021-12-15: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-42309 - CVSS 8.8 (high), 2021-12-15: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-40442 - CVSS 7.8 (high), 2021-11-10: Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-41344 - CVSS 8.8 (high), 2021-10-13: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-40487 - CVSS 8.8 (high), 2021-10-13: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-40486 - CVSS 7.8 (high), 2021-10-13: Microsoft Word Remote Code Execution Vulnerability
CVE-2021-40485 - CVSS 7.8 (high), 2021-10-13: Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-40484 - CVSS 7.6 (high), 2021-10-13: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-38652 - CVSS 7.6 (high), 2021-09-15: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-38651 - CVSS 7.6 (high), 2021-09-15: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-36940 - CVSS 7.6 (high), 2021-08-12: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-31948 - CVSS 8.1 (high), 2021-06-08: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-26420 - CVSS 8.8 (high), 2021-06-08: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-31181 - CVSS 8.8 (high), 2021-05-11: Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2021-27052 - CVSS 6.5 (medium), 2021-03-11: Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-24104 - CVSS 5.4 (medium), 2021-03-11: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-24071 - CVSS 6.5 (medium), 2021-02-25: Microsoft SharePoint Information Disclosure Vulnerability
CVE-2021-24066 - CVSS 8.8 (high), 2021-02-25: Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2021-24072 - CVSS 8.8 (high), 2021-02-25: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-1726 - CVSS 8 (high), 2021-02-25: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-1707 - CVSS 8.8 (high), 2021-01-12: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-1715 - CVSS 7.8 (high), 2021-01-12: Microsoft Word Remote Code Execution Vulnerability
CVE-2021-1719 - CVSS 8 (high), 2021-01-12: Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2021-1714 - CVSS 7.8 (high), 2021-01-12: Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-1717 - CVSS 5.4 (medium), 2021-01-12: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-1712 - CVSS 8 (high), 2021-01-12: Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2021-1716 - CVSS 7.8 (high), 2021-01-12: Microsoft Word Remote Code Execution Vulnerability
CVE-2021-1641 - CVSS 5.4 (medium), 2021-01-12: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17060 - CVSS 5.4 (medium), 2020-11-11: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17016 - CVSS 8.8 (high), 2020-11-11: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17015 - CVSS 6.5 (medium), 2020-11-11: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17017 - CVSS 6.5 (medium), 2020-11-11: Microsoft SharePoint Information Disclosure Vulnerability
CVE-2020-16979 - CVSS 6.5 (medium), 2020-11-11: Microsoft SharePoint Information Disclosure Vulnerability
CVE-2020-16948 - CVSS 6.5 (medium), 2020-10-16: An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully…
CVE-2020-16953 - CVSS 6.5 (medium), 2020-10-16: An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully…
CVE-2020-16946 - CVSS 8.7 (high), 2020-10-16: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an…
CVE-2020-16952 - CVSS 8.6 (high), 2020-10-16: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An…
CVE-2020-16951 - CVSS 8.6 (high), 2020-10-16: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An…
CVE-2020-16929 - CVSS 7.8 (high), 2020-10-16: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who…
CVE-2020-16944 - CVSS 8.7 (high), 2020-10-16: This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. An…
CVE-2020-16942 - CVSS 4.4 (medium), 2020-10-16: An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web…
CVE-2020-16941 - CVSS 5.5 (medium), 2020-10-16: An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web…
CVE-2020-16945 - CVSS 8.7 (high), 2020-10-16: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an…
CVE-2020-1595 - CVSS 9.9 (critical), 2020-09-11: A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input. An attacker who…
CVE-2020-1576 - CVSS 8.8 (high), 2020-09-11: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An…
CVE-2020-1514 - CVSS 5.4 (medium), 2020-09-11: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an…
CVE-2020-1452 - CVSS 8.6 (high), 2020-09-11: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An…
CVE-2020-1482 - CVSS 6.3 (medium), 2020-09-11: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an…
CVE-2020-1440 - CVSS 6.3 (medium), 2020-09-11: A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this…
CVE-2020-1460 - CVSS 8.8 (high), 2020-09-11: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An…
CVE-2020-1345 - CVSS 7.4 (high), 2020-09-11: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an…
CVE-2020-1453 - CVSS 8.6 (high), 2020-09-11: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An…
CVE-2020-1198 - CVSS 7.4 (high), 2020-09-11: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an…
CVE-2020-1210 - CVSS 9.9 (critical), 2020-09-11: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An…
CVE-2020-1227 - CVSS 5.4 (medium), 2020-09-11: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an…
CVE-2020-1205 - CVSS 4.6 (medium), 2020-09-11: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint…
CVE-2020-1224 - CVSS 5.5 (medium), 2020-09-11: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the…
CVE-2020-1200 - CVSS 8.6 (high), 2020-09-11: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An…
CVE-2020-1218 - CVSS 8.8 (high), 2020-09-11: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully…
CVE-2020-1583 - CVSS 8.8 (high), 2020-08-17: An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the…