Microsoft Sharepoint Enterprise Server 2016 vulnerabilities

335 known vulnerabilities affecting microsoft/microsoft_sharepoint_enterprise_server_2016.

Total CVEs

335

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL11HIGH187MEDIUM130LOW7

Vulnerabilities

SortPage 11 of 17

CVE-2023-38177P3MEDIUMCVSS 6.8≥ 16.0.0, < 16.0.5422.10002023-11-14

CVE-2023-38177 [MEDIUM] CWE-502 CVE-2023-38177: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

nvd

CVE-2020-16953P3MEDIUMCVSS 6.5≥ 16.0.0, < publication2020-10-16

CVE-2020-16953 [MEDIUM] CVE-2020-16953: <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafte

nvd

CVE-2020-16948P3MEDIUMCVSS 6.5≥ 16.0.0, < publication2020-10-16

CVE-2020-16948 [MEDIUM] CVE-2020-16948: <p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafte

nvd

CVE-2024-49062P3MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5478.10002024-12-12

CVE-2024-49062 [MEDIUM] CWE-23 CVE-2024-49062: Microsoft SharePoint Information Disclosure Vulnerability Microsoft SharePoint Information Disclosure Vulnerability

nvd

CVE-2025-30384P3HIGHCVSS 7.0≥ 16.0.0, < 16.0.5500.10012025-05-13

CVE-2025-30384 [HIGH] CWE-502 CVE-2025-30384: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-20959P3MEDIUMCVSS 5.4≥ 16.0.0, < 16.0.5535.10012026-01-13

CVE-2026-20959 [MEDIUM] CWE-79 CVE-2026-20959: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

nvd

CVE-2021-31965P3MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5173.10002021-06-08

CVE-2021-31965 [MEDIUM] CVE-2021-31965: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

nvd

CVE-2022-41122P3MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5361.10022022-11-09

CVE-2022-41122 [MEDIUM] CVE-2022-41122: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

nvd

CVE-2025-59221P3HIGHCVSS 7.0≥ 16.0.0, < 16.0.5522.10002025-10-14

CVE-2025-59221 [HIGH] CWE-416 CVE-2025-59221: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

nvd

CVE-2020-17017P3MEDIUMCVSS 6.5≥ 16.0.0, < publication2020-11-11

CVE-2020-17017 [MEDIUM] CVE-2020-17017: Microsoft SharePoint Information Disclosure Vulnerability Microsoft SharePoint Information Disclosure Vulnerability

nvd

CVE-2021-31172P3HIGHCVSS 7.1≥ 16.0.0, < 16.0.5161.10002021-05-11

CVE-2021-31172 [HIGH] CWE-290 CVE-2021-31172: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

nvd

CVE-2020-16979P3MEDIUMCVSS 6.5≥ 16.0.0, < publication2020-11-11

CVE-2020-16979 [MEDIUM] CVE-2020-16979: Microsoft SharePoint Information Disclosure Vulnerability Microsoft SharePoint Information Disclosure Vulnerability

nvd

CVE-2021-27052P4MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5134.10002021-03-11

CVE-2021-27052 [MEDIUM] CVE-2021-27052: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

nvd

CVE-2020-17120P3MEDIUMCVSS 6.5≥ 16.0.0, < publication2020-12-10

CVE-2020-17120 [MEDIUM] CVE-2020-17120: Microsoft SharePoint Information Disclosure Vulnerability Microsoft SharePoint Information Disclosure Vulnerability

nvd

CVE-2021-28478P4HIGHCVSS 7.1≥ 16.0.0, < 16.0.5161.10002021-05-11

CVE-2021-28478 [HIGH] CWE-290 CVE-2021-28478: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

nvd

CVE-2021-24071P3MEDIUMCVSS 6.5≥ 16.0.0, < publication2021-02-25

CVE-2021-24071 [MEDIUM] CVE-2021-24071: Microsoft SharePoint Information Disclosure Vulnerability Microsoft SharePoint Information Disclosure Vulnerability

nvd

CVE-2023-36894P4MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5408.10002023-08-08

CVE-2023-36894 [MEDIUM] CWE-200 CVE-2023-36894: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

nvd

CVE-2026-20943P3HIGHCVSS 7.0≥ 16.0.0, < 16.0.5535.10012026-01-13

CVE-2026-20943 [HIGH] CWE-426 CVE-2026-20943: Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally. Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2023-24954P4MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5395.10002023-05-09

CVE-2023-24954 [MEDIUM] CWE-918 CVE-2023-24954: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

nvd

CVE-2024-49064P4MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5478.10002024-12-12

CVE-2024-49064 [MEDIUM] CWE-611 CVE-2024-49064: Microsoft SharePoint Information Disclosure Vulnerability Microsoft SharePoint Information Disclosure Vulnerability

nvd

← Previous11 / 17Next →