Microsoft Sharepoint Server 2019 vulnerabilities
353 known vulnerabilities affecting microsoft/microsoft_sharepoint_server_2019.
Total CVEs
353
CISA KEV
14
actively exploited
Public exploits
19
Exploited in wild
23
Severity breakdown
CRITICAL13HIGH195MEDIUM138LOW7
Vulnerabilities
Page 4 of 18
CVE-2026-33110P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10417.201282026-05-12
CVE-2026-33110 [HIGH] CWE-502 CVE-2026-33110: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2023-24950P3MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.10398.200002023-05-09
CVE-2023-24950 [MEDIUM] CWE-20 CVE-2023-24950: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2026-62827P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10417.201982026-08-11
CVE-2026-62827 [HIGH] CWE-287 CVE-2026-62827: Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate priv
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2020-17118P2CRITICALCVSS 9.8≥ 16.0.0, < publication2020-12-10
CVE-2020-17118 [CRITICAL] CVE-2020-17118: Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
nvd
CVE-2026-40357P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10417.201282026-05-12
CVE-2026-40357 [HIGH] CWE-502 CVE-2026-40357: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2026-65665P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10417.201982026-08-11
CVE-2026-65665 [HIGH] CWE-502 CVE-2026-65665: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2026-45454P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10417.201532026-06-09
CVE-2026-45454 [HIGH] CWE-22 CVE-2026-45454: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2022-30157P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10387.200082022-06-15
CVE-2022-30157 [HIGH] CVE-2022-30157: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2021-34467P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10376.200012021-07-16
CVE-2021-34467 [HIGH] CVE-2021-34467: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2021-41344P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10379.200002021-10-13
CVE-2021-41344 [HIGH] CVE-2021-41344: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2021-24066P2HIGHCVSS 8.8≥ 16.0.0, < publication2021-02-25
CVE-2021-24066 [HIGH] CWE-502 CVE-2021-24066: Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
nvd
CVE-2025-29793P3HIGHCVSS 7.2≥ 16.0.0, < 16.0.10417.200032025-04-08
CVE-2025-29793 [HIGH] CWE-502 CVE-2025-29793: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2025-59228P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10417.200592025-10-14
CVE-2025-59228 [HIGH] CWE-20 CVE-2025-59228: Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute co
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2025-49701P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10417.200272025-07-08
CVE-2025-49701 [HIGH] CWE-285 CVE-2025-49701: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2026-55052P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10417.201752026-07-14
CVE-2026-55052 [HIGH] CWE-862 CVE-2026-55052: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-58277P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10417.201752026-07-14
CVE-2026-58277 [HIGH] CWE-285 CVE-2026-58277: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privi
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-33160P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.10400.200082023-07-11
CVE-2023-33160 [HIGH] CWE-502 CVE-2023-33160: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2021-34520P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.10376.200012021-07-14
CVE-2021-34520 [HIGH] CWE-502 CVE-2021-34520: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2020-17061P3HIGHCVSS 8.8≥ 16.0.0, < publication2020-11-11
CVE-2020-17061 [HIGH] CVE-2020-17061: Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
nvd
CVE-2022-30158P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.10387.200082022-06-15
CVE-2022-30158 [HIGH] CVE-2022-30158: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd