← Back

Sharepoint Server

sharepoint_server

Vendor: Microsoft • 632 CVEs

CVEs (632)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
8365 Apps
OfficeOffice Online Server+5 more
Jun 17, 2026
Jan 12, 2021
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Microsoft Word Remote Code Execution Vulnerability
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Jan 12, 2021
N/A· v4
8.0 HIGH· v3
6.0 MEDIUM· v2
Microsoft SharePoint Elevation of Privilege Vulnerability
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Jan 12, 2021
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
Microsoft SharePoint Server Remote Code Execution Vulnerability
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Jan 12, 2021
N/A· v4
5.4 MEDIUM· v3
5.8 MEDIUM· v2
Microsoft SharePoint Server Spoofing Vulnerability
1Microsoft
3Office
Office Web AppsSharepoint Server
Jun 17, 2026
Dec 10, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Microsoft Excel Remote Code Execution Vulnerability
1Microsoft
2Sharepoint Foundation
Sharepoint Server
Jun 17, 2026
Dec 10, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Microsoft SharePoint Remote Code Execution Vulnerability
1Microsoft
2Sharepoint Foundation
Sharepoint Server
Jun 17, 2026
Dec 10, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Microsoft SharePoint Information Disclosure Vulnerability
1Microsoft
2Sharepoint Foundation
Sharepoint Server
Jun 17, 2026
Dec 10, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Microsoft SharePoint Remote Code Execution Vulnerability
1Microsoft
2Sharepoint Foundation
Sharepoint Server
Jun 17, 2026
Dec 10, 2020
N/A· v4
8.0 HIGH· v3
6.0 MEDIUM· v2
Microsoft SharePoint Server Spoofing Vulnerability
1Microsoft
2Sharepoint Foundation
Sharepoint Server
Jun 17, 2026
Dec 10, 2020
N/A· v4
8.0 HIGH· v3
6.0 MEDIUM· v2
Microsoft SharePoint Elevation of Privilege Vulnerability
1Microsoft
2Sharepoint Foundation
Sharepoint Server
Jun 17, 2026
Nov 11, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Microsoft SharePoint Remote Code Execution Vulnerability
1Microsoft
2Sharepoint Enterprise Server
Sharepoint Server
Jun 17, 2026
Nov 11, 2020
N/A· v4
5.4 MEDIUM· v3
5.8 MEDIUM· v2
Microsoft SharePoint Server Spoofing Vulnerability
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Nov 11, 2020
N/A· v4
6.5 MEDIUM· v3
6.8 MEDIUM· v2
Microsoft SharePoint Information Disclosure Vulnerability
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Nov 11, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Microsoft SharePoint Server Spoofing Vulnerability
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Nov 11, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Microsoft SharePoint Server Spoofing Vulnerability
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Nov 11, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Microsoft SharePoint Information Disclosure Vulnerability
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Oct 16, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further...Show more
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how Microsoft SharePoint Server handles objects in memory.</p>Show less
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Oct 16, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arb...Show more
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.</p> <p>Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.</p> <p>The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.</p>Show less
1Microsoft
3Sharepoint Enterprise Server
Sharepoint FoundationSharepoint Server
Jun 17, 2026
Oct 16, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arb...Show more
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.</p> <p>Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.</p> <p>The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.</p>Show less
1Microsoft
1Sharepoint Server
Jun 17, 2026
Oct 16, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further...Show more
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how Microsoft SharePoint Server handles objects in memory.</p>Show less