Known vulnerabilities in Microsoft SharePoint Server - page 8

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 532
Public exploits: 24
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 532 known vulnerabilities: 4 critical, 122 high, 211 medium, 195 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113075 - Deserialization of Untrusted Data
CVE-2025-53770		 CWE-502 Critical
Available
Exploited
 16.0.10417.20037, 16.0.18526.20508 20.07.2025 SB2025072001
#VU112656 - Improper Authorization
CVE-2025-49701		 CWE-285 Medium
No
No
 16.0.10417.20027 16.0.10417.20027 09.07.2025 SB2025070997
#VU112655 - Improper Authentication
CVE-2025-49706		 CWE-287 Medium
No
Exploited
 16.0.10417.20027 16.0.10417.20027 09.07.2025 SB2025070997
#VU112648 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-49704		 CWE-94 Medium
No
Exploited
 16.0.10417.20027 16.0.10417.20027 09.07.2025 SB2025070997
#VU112469 - Use After Free
CVE-2025-49703		 CWE-416 High
No
No
 - 08.07.2025 SB2025070837
#VU110999 - Use After Free
CVE-2025-47168		 CWE-416 High
No
No
 - 10.06.2025 SB20250610104
#VU110998 - Heap-based Buffer Overflow
CVE-2025-47169		 CWE-122 High
No
No
 - 10.06.2025 SB20250610104
#VU110710 - Deserialization of Untrusted Data
CVE-2025-47163		 CWE-502 Medium
No
No
 - 10.06.2025 SB2025061069
#VU110709 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-47172		 CWE-89 Medium
No
No
 - 10.06.2025 SB2025061069
#VU110707 - Deserialization of Untrusted Data
CVE-2025-47166		 CWE-502 Medium
No
No
 - 10.06.2025 SB2025061069
#VU109082 - Deserialization of Untrusted Data
CVE-2025-30384		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU109081 - Improper Privilege Management
CVE-2025-29976		 CWE-269 Low
No
No
 - 13.05.2025 SB2025051391
#VU109080 - Deserialization of Untrusted Data
CVE-2025-30378		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU109079 - Deserialization of Untrusted Data
CVE-2025-30382		 CWE-502 High
No
No
 - 13.05.2025 SB2025051391
#VU107288 - Deserialization of Untrusted Data
CVE-2025-29793		 CWE-502 Low
No
No
 - 09.04.2025 SB2025040955
#VU107287 - Improper Authorization
CVE-2025-29794		 CWE-285 Medium
No
No
 - 09.04.2025 SB2025040955
#VU107266 - Untrusted Pointer Dereference
CVE-2025-27747		 CWE-822 High
No
No
 - 09.04.2025 SB2025040924
#VU107211 - Integer overflow
CVE-2025-26642		 CWE-190 High
No
No
 - 08.04.2025 SB2025040874
#VU103790 - Improper Authorization
CVE-2025-21400		 CWE-285 Medium
No
No
 - 11.02.2025 SB2025021196
#VU102660 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-21393		 CWE-79 Low
No
No
 - 14.01.2025 SB2025011454


Showing elements 141 - 160 out of 532