Known vulnerabilities in Microsoft SharePoint Server - page 2

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141468 - Deserialization of Untrusted Data
CVE-2026-65658		 CWE-502 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141467 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-64922		 CWE-79 Low
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141466 - Improper input validation
CVE-2026-63520		 CWE-20 High
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141464 - Deserialization of Untrusted Data
CVE-2026-63516		 CWE-502 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141463 - Incorrect Authorization
CVE-2026-63512		 CWE-863 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141462 - Deserialization of Untrusted Data
CVE-2026-63514		 CWE-502 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141461 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62837		 CWE-22 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141460 - Improper Authentication
CVE-2026-62827		 CWE-287 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU138286 - Deserialization of Untrusted Data
CVE-2026-58644		 CWE-502 High
No
Exploited
 16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384 17.07.2026 SB2026071736
#VU138281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55135		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138280 - Missing Authorization
CVE-2026-55052		 CWE-862 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138279 - Server-Side Request Forgery (SSRF)
CVE-2026-55051		 CWE-918 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138278 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55126		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55034		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138276 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55030		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138275 - Weak Authentication
CVE-2026-55040		 CWE-1390 Critical
Available
Exploited
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55016		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55019		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55020		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55021		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735


Showing elements 21 - 40 out of 532