Office SharePoint

CVEs (284)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-66808	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-66805	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65665	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65663	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65658	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-64921	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Aug 11, 2026	Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-64901	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-63514	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-62827	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Aug 11, 2026	Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-40365	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40357	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-35439	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33112	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33110	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	May 12, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26114	Microsoft Office SharePoint	Hig	0.57	8.8	0.03	Mar 10, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26106	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Mar 10, 2026	Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-64672	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Dec 9, 2025	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2025-59237	Microsoft Office SharePoint	Hig	0.57	8.8	0.02	Oct 14, 2025	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59228	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Oct 14, 2025	Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-49701	Microsoft Office SharePoint	Hig	0.57	8.8	0.01	Jul 8, 2025	Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-66808HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-66805HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65665HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65663HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65658HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-64921HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-64901HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-63514HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-62827HigAug 11, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-40365HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40357HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-35439HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33112HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33110HigMay 12, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26114HigMar 10, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.03
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-26106HigMar 10, 2026
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-64672HigDec 9, 2025
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2025-59237HigOct 14, 2025
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-59228HigOct 14, 2025
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-49701HigJul 8, 2025
Microsoft
Office SharePoint
risk 0.57cvss 8.8epss 0.01
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Page 4 of 15