Office SharePoint

CVEs (233)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-65665	Microsoft Office SharePoint	Hig	0.57	8.8	0.03	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65663	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65660	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Aug 11, 2026	Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65658	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-64921	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Aug 11, 2026	Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-64901	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-63514	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-62827	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Aug 11, 2026	Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-40365	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40357	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-35439	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33112	Microsoft Office SharePoint	Hig	0.57	8.8	0.33	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33110	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26114	Microsoft Office SharePoint	Hig	0.57	8.8	0.03	Mar 10, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26106	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Mar 10, 2026	Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-64672	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Dec 9, 2025	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2025-59237	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Oct 14, 2025	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59228	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Oct 14, 2025	Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-49701	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Jul 8, 2025	Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47172	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Jun 10, 2025	Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-65665HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.03
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65663HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65660HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65658HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-64921HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-64901HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-63514HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-62827HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-40365HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40357HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-35439HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33112HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.33
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33110HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26114HigMar 10, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.03
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26106HigMar 10, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-64672HigDec 9, 2025
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2025-59237HigOct 14, 2025
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59228HigOct 14, 2025
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-49701HigJul 8, 2025
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47172HigJun 10, 2025
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Page 3 of 12