Microsoft Sharepoint Enterprise Server 2016 vulnerabilities

CVE-2025-30382 [HIGH] CWE-502 CVE-2025-30382: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

CVE-2022-21987 [HIGH] CVE-2022-21987: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-63516 [MEDIUM] CWE-502 CVE-2026-63516: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to pe Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-54108 [MEDIUM] CWE-73 CVE-2026-54108: External control of file name or path in Microsoft Office SharePoint allows an authorized attacker t External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-63512 [MEDIUM] CWE-863 CVE-2026-63512: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tamp Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

CVE-2022-21842 [HIGH] CVE-2022-21842: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability

CVE-2024-32987 [HIGH] CWE-918 CVE-2024-32987: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

CVE-2024-30100 [HIGH] CWE-426 CVE-2024-30100: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2025-21344 [HIGH] CWE-20 CVE-2025-21344: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2024-43503 [HIGH] CWE-284 CVE-2024-43503: Microsoft SharePoint Elevation of Privilege Vulnerability Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2026-62837 [MEDIUM] CWE-23 CVE-2026-62837: Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose inf Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-58639 [MEDIUM] CWE-918 CVE-2026-58639: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to p Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-55051 [MEDIUM] CWE-918 CVE-2026-55051: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2022-41061 [HIGH] CWE-94 CVE-2022-41061: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability

CVE-2026-20945 [MEDIUM] CWE-79 CVE-2026-20945: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2024-43466 [HIGH] CWE-502 CVE-2024-43466: Microsoft SharePoint Server Denial of Service Vulnerability Microsoft SharePoint Server Denial of Service Vulnerability

CVE-2026-62839 [MEDIUM] CWE-522 CVE-2026-62839: Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2020-16951 [HIGH] CWE-346 CVE-2020-16951: <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to c A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation of this vulnerability

CVE-2023-36762 [HIGH] CWE-20 CVE-2023-36762: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability

CVE-2025-62555 [HIGH] CWE-416 CVE-2025-62555: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.