Microsoft Sharepoint Server Subscription Edition vulnerabilities
272 known vulnerabilities affecting microsoft/microsoft_sharepoint_server_subscription_edition.
Total CVEs
272
CISA KEV
12
actively exploited
Public exploits
14
Exploited in wild
19
Severity breakdown
CRITICAL10HIGH157MEDIUM100LOW5
Vulnerabilities
Page 14 of 14
CVE-2022-30171P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.14931.204182022-06-15
CVE-2022-30171 [MEDIUM] CVE-2022-30171: Microsoft Office Information Disclosure Vulnerability
Microsoft Office Information Disclosure Vulnerability
nvd
CVE-2026-102864P4MEDIUMCVSS 4.6≥ 16.0.0, < 16.0.20326.201902026-10-13
CVE-2026-102864 [MEDIUM] CWE-79 CVE-2026-102864: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-102859P4MEDIUMCVSS 4.6≥ 16.0.0, < 16.0.20326.201902026-10-13
CVE-2026-102859 [MEDIUM] CWE-79 CVE-2026-102859: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-88209P4MEDIUMCVSS 4.6≥ 16.0.0, < 16.0.20326.201902026-10-13
CVE-2026-88209 [MEDIUM] CWE-79 CVE-2026-88209: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-88208P4MEDIUMCVSS 4.6≥ 16.0.0, < 16.0.20326.201902026-10-13
CVE-2026-88208 [MEDIUM] CWE-79 CVE-2026-88208: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2026-69615P4MEDIUMCVSS 4.8≥ 16.0.0, < 16.0.20326.200902026-09-08
CVE-2026-69615 [MEDIUM] CWE-79 CVE-2026-69615: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2022-41103P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.15601.202382022-11-09
CVE-2022-41103 [MEDIUM] CVE-2022-41103: Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
nvd
CVE-2026-69904P4LOWCVSS 3.5≥ 16.0.0, < 16.0.20326.200822026-09-08
CVE-2026-69904 [LOW] CWE-918 CVE-2026-69904: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-55035P4LOWCVSS 3.3≥ 16.0.0, < 16.0.19725.204342026-07-14
CVE-2026-55035 [LOW] CWE-125 CVE-2026-55035: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2024-26251P4LOWCVSS 3.1≥ 16.0.0, < 16.0.17328.202462024-04-09
CVE-2024-26251 [LOW] CWE-79 CVE-2024-26251: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
CVE-2026-45485P4LOWCVSS 3.3≥ 16.0.0, < 16.0.19725.203842026-06-09
CVE-2026-45485 [LOW] CWE-125 CVE-2026-45485: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-23395P4LOWCVSS 3.1≥ 16.0.0, < 16.0.16130.201662023-03-14
CVE-2023-23395 [LOW] CWE-601 CVE-2023-23395: Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
nvd
← Previous14 / 14