Known vulnerabilities in Microsoft SharePoint Server - page 5

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 548
Public exploits: 25
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 548 known vulnerabilities: 4 critical, 122 high, 218 medium, 204 low Critical High Medium Low

Vulnerabilities (548)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138254 - Out-of-bounds read
CVE-2026-55121		 CWE-125 Low
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138252 - Out-of-bounds read
CVE-2026-56192		 CWE-125 Medium
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU138239 - Heap-based Buffer Overflow
CVE-2026-55130		 CWE-122 High
No
No
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 17.07.2026 SB2026071713
#VU137541 - Missing Authentication for Critical Function
CVE-2026-56164		 CWE-306 High
No
Exploited
 16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434 14.07.2026 SB20260714113
#VU134498 - Heap-based Buffer Overflow
CVE-2026-44824		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134497 - Out-of-bounds read
CVE-2026-44821		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134496 - Heap-based Buffer Overflow
CVE-2026-44819		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134495 - Out-of-bounds read
CVE-2026-45485		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134489 - Heap-based Buffer Overflow
CVE-2026-45475		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134478 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45483		 CWE-79 Low
No
No
 16.0.10417.20153 12.06.2026 SB2026061278
#VU134244 - Use After Free
CVE-2026-45458		 CWE-416 High
No
No
 - 10.06.2026 SB2026061097
#VU134228 - Type confusion
CVE-2026-45456		 CWE-843 High
No
No
 - 10.06.2026 SB2026061097
#VU134213 - Untrusted Pointer Dereference
CVE-2026-45471		 CWE-822 High
No
No
 - 10.06.2026 SB2026061062
#VU134165 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45454		 CWE-22 Medium
No
No
 16.0.10417.20153 10.06.2026 SB2026061006
#VU134161 - Deserialization of Untrusted Data
CVE-2026-45484		 CWE-502 Medium
No
No
 16.0.10417.20153 10.06.2026 SB2026061006
#VU134158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48562		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134157 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48560		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134156 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45481		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134155 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47640		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973
#VU134119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45467		 CWE-79 Low
No
No
 16.0.10417.20153 09.06.2026 SB2026060973


Showing elements 81 - 100 out of 548