Known vulnerabilities in Microsoft SharePoint Enterprise Server - page 2

Vendor: Microsoft
Software: Microsoft SharePoint Enterprise Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 171
Public exploits: 4
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Enterprise Server Microsoft SharePoint Enterprise Server is affected by 171 known vulnerabilities: 38 high, 92 medium, 41 low Critical High Medium Low

Vulnerabilities (171)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141460 - Improper Authentication
CVE-2026-62827		 CWE-287 Medium
No
No
 16.0.5565.1001 11.08.2026 SB2026081148
#VU134498 - Heap-based Buffer Overflow
CVE-2026-44824		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134497 - Out-of-bounds read
CVE-2026-44821		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134496 - Heap-based Buffer Overflow
CVE-2026-44819		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134495 - Out-of-bounds read
CVE-2026-45485		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134489 - Heap-based Buffer Overflow
CVE-2026-45475		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134478 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45483		 CWE-79 Low
No
No
 16.0.5556.1005 12.06.2026 SB2026061278
#VU134244 - Use After Free
CVE-2026-45458		 CWE-416 High
No
No
 - 10.06.2026 SB2026061097
#VU134228 - Type confusion
CVE-2026-45456		 CWE-843 High
No
No
 - 10.06.2026 SB2026061097
#VU134213 - Untrusted Pointer Dereference
CVE-2026-45471		 CWE-822 High
No
No
 - 10.06.2026 SB2026061062
#VU134165 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45454		 CWE-22 Medium
No
No
 16.0.5556.1005 10.06.2026 SB2026061006
#VU134161 - Deserialization of Untrusted Data
CVE-2026-45484		 CWE-502 Medium
No
No
 16.0.5556.1005 10.06.2026 SB2026061006
#VU134158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48562		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134157 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48560		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134156 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45481		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134155 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47640		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45465		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45464		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45462		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973
#VU134119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45467		 CWE-79 Low
No
No
 16.0.5556.1005 09.06.2026 SB2026060973


Showing elements 21 - 40 out of 171