Microsoft Sharepoint Server 2019 vulnerabilities

CVE-2025-21400 [HIGH] CWE-285 CVE-2025-21400: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-55040 [CRITICAL] CWE-1390 CVE-2026-55040: Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a secur Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

CVE-2022-29108 [HIGH] CVE-2022-29108: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2025-29794 [HIGH] CWE-285 CVE-2025-29794: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2024-30043 [HIGH] CWE-611 CVE-2024-30043: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

CVE-2024-43464 [HIGH] CWE-502 CVE-2024-43464: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2020-1025 [CRITICAL] CWE-20 CVE-2020-1025: An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Busine An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, an attacker would need to modify the token. The update

CVE-2026-33112 [HIGH] CWE-502 CVE-2026-33112: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-26114 [HIGH] CWE-502 CVE-2026-26114: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2023-24950 [MEDIUM] CWE-20 CVE-2023-24950: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2025-47172 [HIGH] CWE-89 CVE-2025-47172: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Of Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2022-30157 [HIGH] CVE-2022-30157: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-26106 [HIGH] CWE-20 CVE-2026-26106: Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute co Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-59228 [HIGH] CWE-20 CVE-2025-59228: Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute co Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2020-17118 [CRITICAL] CVE-2020-17118: Microsoft SharePoint Remote Code Execution Vulnerability Microsoft SharePoint Remote Code Execution Vulnerability

CVE-2025-59237 [HIGH] CWE-502 CVE-2025-59237: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-58277 [HIGH] CWE-285 CVE-2026-58277: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privi Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2023-33160 [HIGH] CWE-502 CVE-2023-33160: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-35439 [HIGH] CWE-502 CVE-2026-35439: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-45454 [HIGH] CWE-22 CVE-2026-45454: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.