Microsoft Sharepoint Server Subscription Edition vulnerabilities

CVE-2022-21987 [HIGH] CVE-2022-21987: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-63516 [MEDIUM] CWE-502 CVE-2026-63516: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to pe Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-97782 [MEDIUM] CWE-203 CVE-2026-97782: Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampe Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

CVE-2026-70298 [MEDIUM] CWE-22 CVE-2026-70298: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-85932 [MEDIUM] CWE-22 CVE-2026-85932: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-54108 [MEDIUM] CWE-73 CVE-2026-54108: External control of file name or path in Microsoft Office SharePoint allows an authorized attacker t External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-70259 [MEDIUM] CWE-918 CVE-2026-70259: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-63512 [MEDIUM] CWE-863 CVE-2026-63512: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tamp Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

CVE-2024-32987 [HIGH] CWE-918 CVE-2024-32987: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

CVE-2024-30100 [HIGH] CWE-426 CVE-2024-30100: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2025-21344 [HIGH] CWE-20 CVE-2025-21344: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2024-43503 [HIGH] CWE-284 CVE-2024-43503: Microsoft SharePoint Elevation of Privilege Vulnerability Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2026-62837 [MEDIUM] CWE-23 CVE-2026-62837: Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose inf Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-69409 [MEDIUM] CWE-250 CVE-2026-69409: Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker t Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-58639 [MEDIUM] CWE-918 CVE-2026-58639: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to p Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-55051 [MEDIUM] CWE-918 CVE-2026-55051: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-102865 [MEDIUM] CWE-863 CVE-2026-102865: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose inf Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2022-41061 [HIGH] CWE-94 CVE-2022-41061: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability

CVE-2026-20945 [MEDIUM] CWE-79 CVE-2026-20945: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-88204 [HIGH] CWE-79 CVE-2026-88204: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.