Known vulnerabilities in Microsoft SharePoint Server - page 3

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 548
Public exploits: 25
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 548 known vulnerabilities: 4 critical, 122 high, 218 medium, 204 low Critical High Medium Low

Vulnerabilities (548)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141463 - Incorrect Authorization
CVE-2026-63512		 CWE-863 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141462 - Deserialization of Untrusted Data
CVE-2026-63514		 CWE-502 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141461 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62837		 CWE-22 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU141460 - Improper Authentication
CVE-2026-62827		 CWE-287 Medium
No
No
 16.0.10417.20198 11.08.2026 SB2026081148
#VU138286 - Deserialization of Untrusted Data
CVE-2026-58644		 CWE-502 High
No
Exploited
 16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384 17.07.2026 SB2026071736
#VU138285 - Deserialization of Untrusted Data
CVE-2026-50522		 CWE-502 High
Available
Exploited
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138284 - External Control of File Name or Path
CVE-2026-54108		 CWE-73 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138283 - Improper Authorization
CVE-2026-58277		 CWE-285 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175 17.07.2026 SB2026071735
#VU138282 - Improper Access Control
CVE-2026-56157		 CWE-284 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55135		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138280 - Missing Authorization
CVE-2026-55052		 CWE-862 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138279 - Server-Side Request Forgery (SSRF)
CVE-2026-55051		 CWE-918 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138278 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55126		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55034		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138276 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55030		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138275 - Weak Authentication
CVE-2026-55040		 CWE-1390 Critical
Available
Exploited
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55016		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55019		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55020		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55021		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735


Showing elements 41 - 60 out of 548