Microsoft Sharepoint Enterprise Server 2016 vulnerabilities
335 known vulnerabilities affecting microsoft/microsoft_sharepoint_enterprise_server_2016.
Total CVEs
335
CISA KEV
13
actively exploited
Public exploits
18
Exploited in wild
22
Severity breakdown
CRITICAL11HIGH187MEDIUM130LOW7
Vulnerabilities
Page 4 of 17
CVE-2023-24950P3MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5395.10002023-05-09
CVE-2023-24950 [MEDIUM] CWE-20 CVE-2023-24950: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2026-62827P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5565.10012026-08-11
CVE-2026-62827 [HIGH] CWE-287 CVE-2026-62827: Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate priv
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2020-17118P2CRITICALCVSS 9.8≥ 16.0.0, < publication2020-12-10
CVE-2020-17118 [CRITICAL] CVE-2020-17118: Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
nvd
CVE-2026-40357P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5552.10022026-05-12
CVE-2026-40357 [HIGH] CWE-502 CVE-2026-40357: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2026-45454P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-45454 [HIGH] CWE-22 CVE-2026-45454: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2022-30157P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5332.10012022-06-15
CVE-2022-30157 [HIGH] CVE-2022-30157: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2021-34467P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5188.10002021-07-16
CVE-2021-34467 [HIGH] CVE-2021-34467: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2021-41344P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5227.10002021-10-13
CVE-2021-41344 [HIGH] CVE-2021-41344: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2021-24066P2HIGHCVSS 8.8≥ 16.0.0, < publication2021-02-25
CVE-2021-24066 [HIGH] CWE-502 CVE-2021-24066: Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
nvd
CVE-2025-29793P3HIGHCVSS 7.2≥ 16.0.0, < 16.0.5495.10022025-04-08
CVE-2025-29793 [HIGH] CWE-502 CVE-2025-29793: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2025-59228P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5522.10002025-10-14
CVE-2025-59228 [HIGH] CWE-20 CVE-2025-59228: Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute co
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2025-49701P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5508.10002025-07-08
CVE-2025-49701 [HIGH] CWE-285 CVE-2025-49701: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2026-55052P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5561.10012026-07-14
CVE-2026-55052 [HIGH] CWE-862 CVE-2026-55052: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-58277P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5561.10012026-07-14
CVE-2026-58277 [HIGH] CWE-285 CVE-2026-58277: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privi
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-33160P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.5404.10002023-07-11
CVE-2023-33160 [HIGH] CWE-502 CVE-2023-33160: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2021-34520P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5188.10002021-07-14
CVE-2021-34520 [HIGH] CWE-502 CVE-2021-34520: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2020-17061P3HIGHCVSS 8.8≥ 16.0.0, < publication2020-11-11
CVE-2020-17061 [HIGH] CVE-2020-17061: Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
nvd
CVE-2022-30158P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5332.10012022-06-15
CVE-2022-30158 [HIGH] CVE-2022-30158: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2022-41038P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5365.10002022-10-11
CVE-2022-41038 [HIGH] CVE-2022-41038: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2023-21744P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5378.10002023-01-10
CVE-2023-21744 [HIGH] CWE-502 CVE-2023-21744: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd