Microsoft Sharepoint Server Subscription Edition vulnerabilities

CVE-2022-41036 [HIGH] CVE-2022-41036: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-88200 [HIGH] CWE-270 CVE-2026-88200: Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to el Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-47294 [HIGH] CWE-78 CVE-2026-47294: Improper neutralization of special elements used in an os command ('os command injection') in Micros Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2024-38227 [HIGH] CWE-77 CVE-2024-38227: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2023-36764 [HIGH] CWE-73 CVE-2023-36764: Microsoft SharePoint Server Elevation of Privilege Vulnerability Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVE-2026-97755 [HIGH] CWE-125 CVE-2026-97755: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-102866 [HIGH] CWE-347 CVE-2026-102866: Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthoriz Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

CVE-2022-21840 [HIGH] CVE-2022-21840: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability

CVE-2026-40368 [HIGH] CWE-502 CVE-2026-40368: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-45458 [HIGH] CWE-416 CVE-2026-45458: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-47298 [HIGH] CWE-285 CVE-2026-47298: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-21511 [HIGH] CWE-502 CVE-2026-21511: Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to per Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-70251 [HIGH] CWE-918 CVE-2026-70251: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-70202 [HIGH] CWE-918 CVE-2026-70202: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-88206 [HIGH] CWE-918 CVE-2026-88206: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-69804 [HIGH] CWE-367 CVE-2026-69804: Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorize Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-70267 [HIGH] CWE-829 CVE-2026-70267: Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an au Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-62204 [HIGH] CWE-502 CVE-2025-62204: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2024-38228 [HIGH] CWE-77 CVE-2024-38228: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-26105 [CRITICAL] CWE-79 CVE-2026-26105: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.