Microsoft Sharepoint Server Subscription Edition vulnerabilities

CVE-2026-69268 [HIGH] CWE-284 CVE-2026-69268: Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-40357 [HIGH] CWE-502 CVE-2026-40357: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-70321 [HIGH] CWE-502 CVE-2026-70321: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-65665 [HIGH] CWE-502 CVE-2026-65665: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-45454 [HIGH] CWE-22 CVE-2026-45454: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-85900 [HIGH] CWE-502 CVE-2026-85900: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69943 [HIGH] CWE-22 CVE-2026-69943: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2022-30157 [HIGH] CVE-2022-30157: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-88163 [HIGH] CWE-122 CVE-2026-88163: Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execu Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-88166 [HIGH] CWE-121 CVE-2026-88166: Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execu Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69464 [HIGH] CWE-250 CVE-2026-69464: Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker t Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-88164 [HIGH] CWE-862 CVE-2026-88164: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102861 [HIGH] CWE-862 CVE-2026-102861: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2025-29793 [HIGH] CWE-502 CVE-2025-29793: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-59228 [HIGH] CWE-20 CVE-2025-59228: Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute co Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-49701 [HIGH] CWE-285 CVE-2025-49701: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-55052 [HIGH] CWE-862 CVE-2026-55052: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-70246 [HIGH] CWE-863 CVE-2026-70246: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate priv Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-108452 [HIGH] CWE-22 CVE-2026-108452: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-102860 [HIGH] CWE-284 CVE-2026-102860: Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate priv Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.