Microsoft Microsoft Sharepoint Server Subscription Edition
271 CVEs affecting Microsoft Microsoft Sharepoint Server Subscription Edition. Latest disclosed: 2026-10-15. Critical: 7, High: 164.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-58644 | Critical | 9.8 | 2026-07-14 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-50522 | Critical | 9.8 | 2026-07-14 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-20963 | Critical | 9.8 | 2026-01-13 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
CVE-2025-53770 | Critical | 9.8 | 2025-07-20 | Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware… |
CVE-2023-21716 | Critical | 9.8 | 2023-02-14 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2026-70306 | Critical | 9.3 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform… |
CVE-2026-55040 | Critical | 9.1 | 2026-07-14 | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-108452 | High | 8.8 | 2026-10-15 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code ove… |
CVE-2026-88164 | High | 8.8 | 2026-10-14 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-97755 | High | 8.8 | 2026-10-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-96044 | High | 8.8 | 2026-10-13 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-88200 | High | 8.8 | 2026-10-13 | Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-88198 | High | 8.8 | 2026-10-13 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-88166 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-88163 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-88155 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-85900 | High | 8.8 | 2026-10-13 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-70266 | High | 8.8 | 2026-10-13 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate pr… |
CVE-2026-70246 | High | 8.8 | 2026-10-13 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69943 | High | 8.8 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code ove… |