Microsoft Sharepoint Server vulnerabilities

CVE-2026-85900 [HIGH] CWE-502 CVE-2026-85900: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69943 [HIGH] CWE-22 CVE-2026-69943: Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2022-30157 [HIGH] CVE-2022-30157: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-88163 [HIGH] CWE-122 CVE-2026-88163: Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execu Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-88166 [HIGH] CWE-121 CVE-2026-88166: Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execu Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69464 [HIGH] CWE-250 CVE-2026-69464: Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker t Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-88164 [HIGH] CWE-862 CVE-2026-88164: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102861 [HIGH] CWE-862 CVE-2026-102861: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2021-34467 [HIGH] CVE-2021-34467: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2021-41344 [HIGH] CVE-2021-41344: Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2021-24066 [HIGH] CWE-502 CVE-2021-24066: Microsoft SharePoint Remote Code Execution Vulnerability Microsoft SharePoint Remote Code Execution Vulnerability

CVE-2013-1315 [CRITICAL] CWE-119 CVE-2013-1315: Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 S Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, ak

CVE-2016-0183 [HIGH] CWE-284 CVE-2016-0183: The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on Sh The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Microsoft Office Graphics RCE Vulnerability."

CVE-2014-6357 [CRITICAL] CVE-2014-6357: Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 Gold and SP1, and Office Web Apps 2010 SP2 and 2013 Gold and SP1 allows remote attackers to execute arbitrary code vi

CVE-2025-29793 [HIGH] CWE-502 CVE-2025-29793: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-59228 [HIGH] CWE-20 CVE-2025-59228: Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute co Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-49701 [HIGH] CWE-285 CVE-2025-49701: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-55052 [HIGH] CWE-862 CVE-2026-55052: Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-58277 [HIGH] CWE-285 CVE-2026-58277: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privi Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-70246 [HIGH] CWE-863 CVE-2026-70246: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate priv Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.