Microsoft Sharepoint Server Subscription Edition vulnerabilities

CVE-2026-69724 [HIGH] CWE-862 CVE-2026-69724: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code o Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69465 [HIGH] CWE-862 CVE-2026-69465: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code o Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2022-29108 [HIGH] CVE-2022-29108: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2025-29794 [HIGH] CWE-285 CVE-2025-29794: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-47172 [HIGH] CWE-89 CVE-2025-47172: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Of Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-64921 [HIGH] CWE-306 CVE-2026-64921: Missing authentication for critical function in Microsoft Office SharePoint allows an authorized att Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-66808 [HIGH] CWE-502 CVE-2026-66808: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-64901 [HIGH] CWE-502 CVE-2026-64901: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-65658 [HIGH] CWE-502 CVE-2026-65658: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-63514 [HIGH] CWE-502 CVE-2026-63514: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-66805 [HIGH] CWE-502 CVE-2026-66805: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-65663 [HIGH] CWE-502 CVE-2026-65663: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-35439 [HIGH] CWE-502 CVE-2026-35439: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-33110 [HIGH] CWE-502 CVE-2026-33110: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2023-24950 [MEDIUM] CWE-20 CVE-2023-24950: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-102863 [HIGH] CWE-94 CVE-2026-102863: Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an a Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-62827 [HIGH] CWE-287 CVE-2026-62827: Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate priv Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-88155 [HIGH] CWE-122 CVE-2026-88155: Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute c Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69273 [HIGH] CWE-284 CVE-2026-69273: Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69282 [HIGH] CWE-284 CVE-2026-69282: Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.