Microsoft Microsoft Sharepoint
52 CVEs affecting Microsoft Microsoft Sharepoint. Latest disclosed: 2019-01-08. Critical: 0, High: 21.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-0585 | High | 8.8 | 2019-01-08 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Exe… |
CVE-2018-8635 | High | 8.8 | 2018-12-12 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an aff… |
CVE-2018-8300 | High | 8.8 | 2018-07-11 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka "Microso… |
CVE-2018-1028 | High | 8.8 | 2018-04-12 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Grap… |
CVE-2018-0947 | High | 8.8 | 2018-03-14 | Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially cra… |
CVE-2018-0944 | High | 8.8 | 2018-03-14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted w… |
CVE-2018-0923 | High | 8.8 | 2018-03-14 | Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Micros… |
CVE-2018-0921 | High | 8.8 | 2018-03-14 | Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Micros… |
CVE-2018-0917 | High | 8.8 | 2018-03-14 | Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Micros… |
CVE-2018-0916 | High | 8.8 | 2018-03-14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted we… |
CVE-2018-0915 | High | 8.8 | 2018-03-14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted we… |
CVE-2018-0914 | High | 8.8 | 2018-03-14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted we… |
CVE-2018-0913 | High | 8.8 | 2018-03-14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted we… |
CVE-2018-0912 | High | 8.8 | 2018-03-14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted we… |
CVE-2018-0911 | High | 8.8 | 2018-03-14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted we… |
CVE-2018-0910 | High | 8.8 | 2018-03-14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted we… |
CVE-2018-0909 | High | 8.8 | 2018-03-14 | Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted we… |
CVE-2018-0790 | High | 8.8 | 2018-01-10 | Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due t… |
CVE-2017-11936 | High | 8.8 | 2017-12-12 | Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint E… |
CVE-2018-8628 | High | 7.8 | 2018-12-12 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft Powe… |