Microsoft Sharepoint Server vulnerabilities

CVE-2020-16942 [MEDIUM] CVE-2020-16942: <p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly disclo An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of the vulnerability, an attacker would require access to the sp

CVE-2010-0716 [LOW] CVE-2010-0716: _layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the _layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading TXT files,

CVE-2021-31171 [MEDIUM] CVE-2021-31171: Microsoft SharePoint Information Disclosure Vulnerability Microsoft SharePoint Information Disclosure Vulnerability

CVE-2021-40483 [LOW] CVE-2021-40483: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2021-40484 [LOW] CVE-2021-40484: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2021-38651 [LOW] CVE-2021-38651: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-55035 [LOW] CWE-125 CVE-2026-55035: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2024-26251 [LOW] CWE-79 CVE-2024-26251: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-45485 [LOW] CWE-125 CVE-2026-45485: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2023-23395 [LOW] CWE-601 CVE-2023-23395: Microsoft SharePoint Server Spoofing Vulnerability Microsoft SharePoint Server Spoofing Vulnerability