Known vulnerabilities in Microsoft SharePoint Server Subscription Edition - page 2

Vendor: Microsoft
Software: Microsoft SharePoint Server Subscription Edition
Software CPE: cpe:2.3:a:microsoft:microsoft_sharepoint_server_subscription_edition:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 163
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Server Subscription Edition is affected by 163 known vulnerabilities: 23 high, 93 medium, 47 low Critical High Medium Low

Vulnerabilities (163)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141464 - Deserialization of Untrusted Data
CVE-2026-63516		 CWE-502 Medium
No
No
 16.0.19725.20522 11.08.2026 SB2026081148
#VU141463 - Incorrect Authorization
CVE-2026-63512		 CWE-863 Medium
No
No
 16.0.19725.20522 11.08.2026 SB2026081148
#VU141462 - Deserialization of Untrusted Data
CVE-2026-63514		 CWE-502 Medium
No
No
 16.0.19725.20522 11.08.2026 SB2026081148
#VU141461 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-62837		 CWE-22 Medium
No
No
 16.0.19725.20522 11.08.2026 SB2026081148
#VU141460 - Improper Authentication
CVE-2026-62827		 CWE-287 Medium
No
No
 16.0.19725.20522 11.08.2026 SB2026081148
#VU134498 - Heap-based Buffer Overflow
CVE-2026-44824		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134497 - Out-of-bounds read
CVE-2026-44821		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134496 - Heap-based Buffer Overflow
CVE-2026-44819		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134495 - Out-of-bounds read
CVE-2026-45485		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134489 - Heap-based Buffer Overflow
CVE-2026-45475		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134478 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45483		 CWE-79 Low
No
No
 16.0.19725.20384 12.06.2026 SB2026061278
#VU134244 - Use After Free
CVE-2026-45458		 CWE-416 High
No
No
 - 10.06.2026 SB2026061097
#VU134228 - Type confusion
CVE-2026-45456		 CWE-843 High
No
No
 - 10.06.2026 SB2026061097
#VU134213 - Untrusted Pointer Dereference
CVE-2026-45471		 CWE-822 High
No
No
 - 10.06.2026 SB2026061062
#VU134165 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45454		 CWE-22 Medium
No
No
 16.0.19725.20384 10.06.2026 SB2026061006
#VU134161 - Deserialization of Untrusted Data
CVE-2026-45484		 CWE-502 Medium
No
No
 16.0.19725.20384 10.06.2026 SB2026061006
#VU134158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48562		 CWE-79 Low
No
No
 16.0.19725.20384 09.06.2026 SB2026060973
#VU134157 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48560		 CWE-79 Low
No
No
 16.0.19725.20384 09.06.2026 SB2026060973
#VU134156 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45481		 CWE-79 Low
No
No
 16.0.19725.20384 09.06.2026 SB2026060973
#VU134119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45467		 CWE-79 Low
No
No
 16.0.19725.20384 09.06.2026 SB2026060973


Showing elements 21 - 40 out of 163