Known vulnerabilities in Microsoft SharePoint Server - page 8

Vendor: Microsoft
Software: Microsoft SharePoint Server
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 548
Public exploits: 25
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Microsoft SharePoint Server is affected by 548 known vulnerabilities: 4 critical, 122 high, 218 medium, 204 low Critical High Medium Low

Vulnerabilities (548)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119490 - Use After Free
CVE-2025-62562		 CWE-416 High
No
No
 - 09.12.2025 SB2025120988
#VU118273 - Deserialization of Untrusted Data
CVE-2025-62204		 CWE-502 Medium
No
No
 - 11.11.2025 SB2025111148
#VU117290 - Use After Free
CVE-2025-59222		 CWE-416 High
No
No
 - 15.10.2025 SB20251015137
#VU117289 - Use After Free
CVE-2025-59221		 CWE-416 High
No
No
 - 15.10.2025 SB20251015137
#VU117249 - Out-of-bounds read
CVE-2025-59235		 CWE-125 Medium
No
No
 - 15.10.2025 SB20251015108
#VU117241 - Out-of-bounds read
CVE-2025-59232		 CWE-125 Medium
No
No
 - 15.10.2025 SB20251015108
#VU117047 - Deserialization of Untrusted Data
CVE-2025-59237		 CWE-502 Medium
No
No
 - 14.10.2025 SB2025101471
#VU117046 - Improper input validation
CVE-2025-59228		 CWE-20 Medium
No
No
 - 14.10.2025 SB2025101471
#VU115125 - Use After Free
CVE-2025-54906		 CWE-416 High
No
No
 - 10.09.2025 SB2025091012
#VU115123 - Untrusted Pointer Dereference
CVE-2025-54905		 CWE-822 Medium
No
No
 - 10.09.2025 SB2025091011
#VU115122 - Deserialization of Untrusted Data
CVE-2025-54897		 CWE-502 Medium
No
No
 - 10.09.2025 SB2025091010
#VU114039 - Incorrect Conversion between Numeric Types
CVE-2025-53733		 CWE-681 High
No
No
 - 13.08.2025 SB2025081388
#VU114038 - Out-of-bounds read
CVE-2025-53736		 CWE-125 Low
No
No
 - 13.08.2025 SB2025081388
#VU114030 - Server-Side Request Forgery (SSRF)
CVE-2025-53760		 CWE-918 Medium
No
No
 - 13.08.2025 SB2025081383
#VU114029 - Deserialization of Untrusted Data
CVE-2025-49712		 CWE-502 Medium
No
No
 - 13.08.2025 SB2025081383
#VU113096 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-53771		 CWE-22 Medium
Available
Exploited
 16.0.5513.1001, 16.0.10417.20037, 16.0.18526.20508 22.07.2025 SB2025072201
#VU113075 - Deserialization of Untrusted Data
CVE-2025-53770		 CWE-502 Critical
Available
Exploited
 16.0.10417.20037, 16.0.18526.20508 20.07.2025 SB2025072001
#VU112656 - Improper Authorization
CVE-2025-49701		 CWE-285 Medium
No
No
 16.0.10417.20027 16.0.10417.20027 09.07.2025 SB2025070997
#VU112655 - Improper Authentication
CVE-2025-49706		 CWE-287 Medium
No
Exploited
 16.0.10417.20027 16.0.10417.20027 09.07.2025 SB2025070997
#VU112648 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-49704		 CWE-94 Medium
No
Exploited
 16.0.10417.20027 16.0.10417.20027 09.07.2025 SB2025070997


Showing elements 141 - 160 out of 548