Microsoft Sharepoint Server 2019 vulnerabilities

CVE-2022-21840 [HIGH] CVE-2022-21840: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability

CVE-2021-43876 [HIGH] CVE-2021-43876: Microsoft SharePoint Elevation of Privilege Vulnerability Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2026-47298 [HIGH] CWE-285 CVE-2026-47298: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2020-1338 [HIGH] CVE-2020-1338: <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with

CVE-2020-1218 [HIGH] CVE-2020-1218: <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with

CVE-2024-38227 [HIGH] CWE-77 CVE-2024-38227: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2023-21717 [HIGH] CWE-284 CVE-2023-21717: Microsoft SharePoint Server Elevation of Privilege Vulnerability Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVE-2026-21511 [HIGH] CWE-502 CVE-2026-21511: Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to per Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-62204 [HIGH] CWE-502 CVE-2025-62204: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-40368 [HIGH] CWE-502 CVE-2026-40368: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2024-38228 [HIGH] CWE-77 CVE-2024-38228: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-40367 [HIGH] CWE-822 CVE-2026-40367: Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an una Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-45456 [HIGH] CWE-843 CVE-2026-45456: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-26105 [CRITICAL] CWE-79 CVE-2026-26105: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-62562 [HIGH] CWE-416 CVE-2025-62562: Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

CVE-2026-44819 [HIGH] CWE-122 CVE-2026-44819: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-45475 [HIGH] CWE-122 CVE-2026-45475: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-44824 [HIGH] CWE-122 CVE-2026-44824: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-55125 [HIGH] CWE-122 CVE-2026-55125: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-53733 [HIGH] CWE-681 CVE-2025-53733: Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.