Known vulnerabilities in Microsoft SharePoint Server - page 4

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138216 - Heap-based Buffer Overflow
CVE-2026-55127		 CWE-122 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138215 - Improper Validation of Specified Type of Input
CVE-2026-55124		 CWE-1287 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138212 - Integer overflow
CVE-2026-55033		 CWE-190 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138211 - Use After Free
CVE-2026-55032		 CWE-416 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138209 - Out-of-bounds read
CVE-2026-55050		 CWE-125 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138208 - Out-of-bounds read
CVE-2026-55045		 CWE-125 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138206 - Out-of-bounds read
CVE-2026-55047		 CWE-125 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU137541 - Missing Authentication for Critical Function
CVE-2026-56164		 CWE-306 High
No
Exploited
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 14.07.2026 SB20260714113
#VU134498 - Heap-based Buffer Overflow
CVE-2026-44824		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134497 - Out-of-bounds read
CVE-2026-44821		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134496 - Heap-based Buffer Overflow
CVE-2026-44819		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134495 - Out-of-bounds read
CVE-2026-45485		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134489 - Heap-based Buffer Overflow
CVE-2026-45475		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134478 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45483		 CWE-79 Low
No
No
 16.0.10417.20153 12.06.2026 SB2026061278
#VU134244 - Use After Free
CVE-2026-45458		 CWE-416 High
No
No
 - 10.06.2026 SB2026061097
#VU134228 - Type confusion
CVE-2026-45456		 CWE-843 High
No
No
 - 10.06.2026 SB2026061097
#VU134213 - Untrusted Pointer Dereference
CVE-2026-45471		 CWE-822 High
No
No
 - 10.06.2026 SB2026061062
#VU134165 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45454		 CWE-22 Medium
No
No
 16.0.10417.20153 10.06.2026 SB2026061006
#VU134161 - Deserialization of Untrusted Data
CVE-2026-45484		 CWE-502 Medium
No
No
 16.0.10417.20153 10.06.2026 SB2026061006
#VU134119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45467		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973


Showing elements 61 - 80 out of 532