Microsoft Sharepoint Server Subscription Edition vulnerabilities
272 known vulnerabilities affecting microsoft/microsoft_sharepoint_server_subscription_edition.
Total CVEs
272
CISA KEV
12
actively exploited
Public exploits
14
Exploited in wild
19
Severity breakdown
CRITICAL10HIGH157MEDIUM100LOW5
Vulnerabilities
Page 5 of 14
CVE-2026-102862P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.20326.201902026-10-13
CVE-2026-102862 [HIGH] CWE-863 CVE-2026-102862: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate priv
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-88198P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.20326.201902026-10-13
CVE-2026-88198 [HIGH] CWE-862 CVE-2026-88198: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-33160P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.16130.206422023-07-11
CVE-2023-33160 [HIGH] CWE-502 CVE-2023-33160: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2022-30158P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.14931.204182022-06-15
CVE-2022-30158 [HIGH] CVE-2022-30158: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2022-41038P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.15601.201582022-10-11
CVE-2022-41038 [HIGH] CVE-2022-41038: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2023-21744P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.15601.204182023-01-10
CVE-2023-21744 [HIGH] CWE-502 CVE-2023-21744: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2025-59237P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.19127.202622025-10-14
CVE-2025-59237 [HIGH] CWE-502 CVE-2025-59237: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2026-40365P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.19725.202802026-05-12
CVE-2026-40365 [HIGH] CWE-1220 CVE-2026-40365: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
nvd
CVE-2026-70324P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.19725.205222026-08-11
CVE-2026-70324 [HIGH] CWE-918 CVE-2026-70324: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-96044P2HIGHCVSS 8.8≥ 16.0.0, < 16.0.20326.201902026-10-13
CVE-2026-96044 [HIGH] CWE-1287 CVE-2026-96044: No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privil
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-70326P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.19725.205222026-08-11
CVE-2026-70326 [HIGH] CWE-918 CVE-2026-70326: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2022-21837P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.14326.207142022-01-11
CVE-2022-21837 [HIGH] CVE-2022-21837: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2021-42309P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.14326.206202021-12-15
CVE-2021-42309 [HIGH] CWE-94 CVE-2021-42309: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2025-53760P3HIGHCVSS 7.1≥ 16.0.0, < 16.0.18526.205182025-08-12
CVE-2025-53760 [HIGH] CWE-918 CVE-2025-53760: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-33134P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.16130.206422023-07-11
CVE-2023-33134 [HIGH] CWE-502 CVE-2023-33134: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2022-44693P3HIGHCVSS 8.8≥ 16.0.0, < 15601.203162022-12-13
CVE-2022-44693 [HIGH] CVE-2022-44693: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2022-38008P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.15601.200522022-09-13
CVE-2022-38008 [HIGH] CVE-2022-38008: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2022-41062P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.15601.202382022-11-09
CVE-2022-41062 [HIGH] CVE-2022-41062: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2022-38009P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.15601.200522022-09-13
CVE-2022-38009 [HIGH] CVE-2022-38009: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd
CVE-2022-41037P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.15601.201582022-10-11
CVE-2022-41037 [HIGH] CVE-2022-41037: Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
nvd