Known vulnerabilities in Microsoft SharePoint Server - page 3

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-62826		 CWE-79 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138285 - Deserialization of Untrusted Data
CVE-2026-50522		 CWE-502 High
No
Exploited
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138284 - External Control of File Name or Path
CVE-2026-54108		 CWE-73 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138283 - Improper Authorization
CVE-2026-58277		 CWE-285 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175 17.07.2026 SB2026071735
#VU138282 - Improper Access Control
CVE-2026-56157		 CWE-284 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071735
#VU138254 - Out-of-bounds read
CVE-2026-55121		 CWE-125 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138252 - Out-of-bounds read
CVE-2026-56192		 CWE-125 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138239 - Heap-based Buffer Overflow
CVE-2026-55130		 CWE-122 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138238 - Use After Free
CVE-2026-55128		 CWE-416 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138236 - Numeric Truncation Error
CVE-2026-55142		 CWE-197 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138234 - Stack-based buffer overflow
CVE-2026-55134		 CWE-121 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138228 - Double Free
CVE-2026-55132		 CWE-415 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138227 - Stack-based buffer overflow
CVE-2026-55038		 CWE-121 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138223 - Stack-based buffer overflow
CVE-2026-55055		 CWE-121 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138220 - Out-of-bounds read
CVE-2026-55035		 CWE-125 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138205 - Out-of-bounds read
CVE-2026-55028		 CWE-125 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138203 - Out-of-bounds read
CVE-2026-55027		 CWE-125 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138201 - Integer overflow
CVE-2026-55026		 CWE-190 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138199 - Heap-based Buffer Overflow
CVE-2026-55125		 CWE-122 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138197 - Out-of-bounds read
CVE-2026-55023		 CWE-125 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713


Showing elements 41 - 60 out of 532