Office SharePoint
by Microsoft
CVEs (192)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-30382 | Hig | 0.51 | 7.8 | 0.02 | May 13, 2025 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-29976 | Hig | 0.51 | 7.8 | 0.01 | May 13, 2025 | Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-27747 | Hig | 0.51 | 7.8 | 0.01 | Apr 8, 2025 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-26642 | Hig | 0.51 | 7.8 | 0.01 | Apr 8, 2025 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-21344 | Hig | 0.51 | 7.8 | 0.01 | Jan 14, 2025 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-43503 | Hig | 0.51 | 7.8 | 0.01 | Oct 8, 2024 | Microsoft SharePoint Elevation of Privilege Vulnerability | ||
| CVE-2024-38023 | Hig | 0.51 | 7.2 | 0.53 | Jul 9, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-30100 | Hig | 0.51 | 7.8 | 0.01 | Jun 11, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-21426 | Hig | 0.51 | 7.8 | 0.02 | Mar 12, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2022-41061 | Hig | 0.51 | 7.8 | 0.01 | Nov 9, 2022 | Microsoft Word Remote Code Execution Vulnerability | ||
| CVE-2020-17122 | Hig | 0.51 | 7.8 | 0.03 | Dec 10, 2020 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2024-43464 | Hig | 0.50 | 7.2 | 0.36 | Sep 10, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-38024 | Hig | 0.50 | 7.2 | 0.45 | Jul 9, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-32987 | Hig | 0.49 | 7.5 | 0.02 | Jul 9, 2024 | Microsoft SharePoint Server Information Disclosure Vulnerability | ||
| CVE-2025-30384 | Hig | 0.48 | 7.4 | 0.01 | May 13, 2025 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-29793 | Hig | 0.48 | 7.2 | 0.22 | Apr 8, 2025 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2024-49070 | Hig | 0.48 | 7.4 | 0.02 | Dec 12, 2024 | Microsoft SharePoint Remote Code Execution Vulnerability | ||
| CVE-2023-33130 | Hig | 0.48 | 7.3 | 0.01 | Jun 14, 2023 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2023-24950 | Med | 0.48 | 6.5 | 0.67 | May 9, 2023 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2026-47634 | Hig | 0.47 | 7.3 | 0.01 | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
- risk 0.51cvss 7.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.01
Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.01
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft SharePoint Elevation of Privilege Vulnerability
- risk 0.51cvss 7.2epss 0.53
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Word Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.50cvss 7.2epss 0.36
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.50cvss 7.2epss 0.45
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Microsoft SharePoint Server Information Disclosure Vulnerability
- risk 0.48cvss 7.4epss 0.01
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
- risk 0.48cvss 7.2epss 0.22
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.48cvss 7.4epss 0.02
Microsoft SharePoint Remote Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.48cvss 6.5epss 0.67
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.47cvss 7.3epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Page 5 of 10