Microsoft Sharepoint Server vulnerabilities

CVE-2019-1260 [MEDIUM] CVE-2019-1260: An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint El An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.

CVE-2023-36894 [MEDIUM] CWE-200 CVE-2023-36894: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

CVE-2023-24954 [MEDIUM] CWE-918 CVE-2023-24954: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

CVE-2026-20943 [HIGH] CWE-426 CVE-2026-20943: Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally. Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2023-36890 [MEDIUM] CWE-284 CVE-2023-36890: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

CVE-2022-41122 [MEDIUM] CVE-2022-41122: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2017-0027 [MEDIUM] CWE-200 CVE-2017-0027: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack S Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."

CVE-2021-28478 [HIGH] CWE-290 CVE-2021-28478: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-20959 [MEDIUM] CWE-79 CVE-2026-20959: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2021-24071 [MEDIUM] CVE-2021-24071: Microsoft SharePoint Information Disclosure Vulnerability Microsoft SharePoint Information Disclosure Vulnerability

CVE-2021-27052 [MEDIUM] CVE-2021-27052: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

CVE-2021-31173 [MEDIUM] CWE-200 CVE-2021-31173: Microsoft SharePoint Server Information Disclosure Vulnerability Microsoft SharePoint Server Information Disclosure Vulnerability

CVE-2025-21393 [MEDIUM] CWE-79 CVE-2025-21393: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2012-1860 [MEDIUM] CWE-264 CVE-2012-1860: Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka

CVE-2020-1103 [MEDIUM] CWE-352 CVE-2020-1103: An information disclosure vulnerability exists where certain modes of the search function in Microso An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF).When users are simultaneously logged in to Microsoft SharePoint Server and visit a malicious web page, the attacker can, through standard br

CVE-2021-26418 [HIGH] CWE-290 CVE-2021-26418: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2024-49064 [MEDIUM] CWE-611 CVE-2024-49064: Microsoft SharePoint Information Disclosure Vulnerability Microsoft SharePoint Information Disclosure Vulnerability

CVE-2025-59235 [HIGH] CWE-125 CVE-2025-59235: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2020-17015 [MEDIUM] CVE-2020-17015: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2023-33132 [MEDIUM] CWE-79 CVE-2023-33132: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability