Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Sharepoint Server
Total 516 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-45465 1 Microsoft 1 Sharepoint Server 2026-06-10 N/A 5.4 MEDIUM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-45479 1 Microsoft 1 Sharepoint Server 2026-06-10 N/A 4.6 MEDIUM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47637 1 Microsoft 1 Sharepoint Server 2026-06-10 N/A 4.6 MEDIUM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47638 1 Microsoft 1 Sharepoint Server 2026-06-10 N/A 4.6 MEDIUM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47639 1 Microsoft 1 Sharepoint Server 2026-06-10 N/A 5.4 MEDIUM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47640 1 Microsoft 1 Sharepoint Server 2026-06-10 N/A 4.6 MEDIUM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47641 1 Microsoft 1 Sharepoint Server 2026-06-10 N/A 4.6 MEDIUM
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47294 1 Microsoft 1 Sharepoint Server 2026-06-03 N/A 8.0 HIGH
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40367 1 Microsoft 5 365 Apps, Office, Office Long Term Servicing Channel and 2 more 2026-06-01 N/A 8.4 HIGH
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40365 1 Microsoft 1 Sharepoint Server 2026-06-01 N/A 8.8 HIGH
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-32201 1 Microsoft 1 Sharepoint Server 2026-05-28 N/A 6.5 MEDIUM
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-45659 1 Microsoft 1 Sharepoint Server 2026-05-27 N/A 8.8 HIGH
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2022-41061 1 Microsoft 8 365 Apps, Office, Office Long Term Servicing Channel and 5 more 2026-05-19 N/A 7.8 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-21840 1 Microsoft 7 Excel, Office, Office Long Term Servicing Channel and 4 more 2026-05-19 6.8 MEDIUM 8.8 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVE-2022-41103 1 Microsoft 8 365 Apps, Office, Office Long Term Servicing Channel and 5 more 2026-05-19 N/A 5.5 MEDIUM
Microsoft Word Information Disclosure Vulnerability
CVE-2022-41060 1 Microsoft 8 365 Apps, Office, Office Long Term Servicing Channel and 5 more 2026-05-19 N/A 5.5 MEDIUM
Microsoft Word Information Disclosure Vulnerability
CVE-2026-33110 1 Microsoft 1 Sharepoint Server 2026-05-13 N/A 8.8 HIGH
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33112 1 Microsoft 1 Sharepoint Server 2026-05-13 N/A 8.8 HIGH
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-35439 1 Microsoft 1 Sharepoint Server 2026-05-13 N/A 8.8 HIGH
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40368 1 Microsoft 1 Sharepoint Server 2026-05-13 N/A 8.0 HIGH
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.