Microsoft Sharepoint Server 2019 vulnerabilities

CVE-2019-1034 [HIGH] CVE-2019-1034: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with

CVE-2019-1201 [HIGH] CVE-2019-1201: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then take actions on behalf of the logged-on user with the same perm

CVE-2021-1716 [HIGH] CVE-2021-1716: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability

CVE-2021-1715 [HIGH] CWE-787 CVE-2021-1715: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability

CVE-2020-17115 [HIGH] CVE-2020-17115: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2021-1719 [HIGH] CWE-269 CVE-2021-1719: Microsoft SharePoint Elevation of Privilege Vulnerability Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2021-1712 [HIGH] CWE-269 CVE-2021-1712: Microsoft SharePoint Elevation of Privilege Vulnerability Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2021-34468 [HIGH] CVE-2021-34468: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2021-1726 [HIGH] CVE-2021-1726: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2025-30382 [HIGH] CWE-502 CVE-2025-30382: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

CVE-2022-21987 [HIGH] CVE-2022-21987: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-63516 [MEDIUM] CWE-502 CVE-2026-63516: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to pe Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-54108 [MEDIUM] CWE-73 CVE-2026-54108: External control of file name or path in Microsoft Office SharePoint allows an authorized attacker t External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-63512 [MEDIUM] CWE-863 CVE-2026-63512: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tamp Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

CVE-2024-32987 [HIGH] CWE-918 CVE-2024-32987: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

CVE-2024-30100 [HIGH] CWE-426 CVE-2024-30100: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2025-21344 [HIGH] CWE-20 CVE-2025-21344: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2024-43503 [HIGH] CWE-284 CVE-2024-43503: Microsoft SharePoint Elevation of Privilege Vulnerability Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2026-62837 [MEDIUM] CWE-23 CVE-2026-62837: Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose inf Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-58639 [MEDIUM] CWE-918 CVE-2026-58639: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to p Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.