Office SharePoint
by Microsoft
CVEs (233)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-33142 | Med | 0.42 | 6.5 | 0.01 | Jun 14, 2023 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | ||
| CVE-2023-33129 | Med | 0.42 | 6.5 | 0.02 | Jun 14, 2023 | Microsoft SharePoint Server Denial of Service Vulnerability | ||
| CVE-2023-24954 | Med | 0.42 | 6.5 | 0.02 | May 9, 2023 | Microsoft SharePoint Server Information Disclosure Vulnerability | ||
| CVE-2022-41122 | Med | 0.42 | 6.5 | 0.01 | Nov 9, 2022 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2025-21393 | Med | 0.41 | 6.3 | 0.01 | Jan 14, 2025 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2023-33132 | Med | 0.41 | 6.3 | 0.01 | Jun 14, 2023 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2023-38177 | Med | 0.40 | 6.1 | 0.03 | Nov 14, 2023 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-49065 | Med | 0.36 | 5.5 | 0.01 | Dec 12, 2024 | Microsoft Office Remote Code Execution Vulnerability | ||
| CVE-2022-41103 | Med | 0.36 | 5.5 | 0.01 | Nov 9, 2022 | Microsoft Word Information Disclosure Vulnerability | ||
| CVE-2022-41060 | Med | 0.36 | 5.5 | 0.01 | Nov 9, 2022 | Microsoft Word Information Disclosure Vulnerability | ||
| CVE-2022-30172 | Med | 0.36 | 5.5 | 0.03 | Jun 15, 2022 | Microsoft Office Information Disclosure Vulnerability | ||
| CVE-2022-30171 | Med | 0.36 | 5.5 | 0.02 | Jun 15, 2022 | Microsoft Office Information Disclosure Vulnerability | ||
| CVE-2022-30159 | Med | 0.36 | 5.5 | 0.03 | Jun 15, 2022 | Microsoft Office Information Disclosure Vulnerability | ||
| CVE-2018-8378 | Med | 0.36 | 5.5 | 0.06 | Aug 15, 2018 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft… | ||
| CVE-2026-47639 | Med | 0.35 | 5.4 | 0.01 | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2026-47636 | Med | 0.35 | 5.4 | 0.01 | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2026-45465 | Med | 0.35 | 5.4 | 0.01 | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2026-45464 | Med | 0.35 | 5.4 | 0.01 | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2026-45453 | Med | 0.35 | 5.4 | 0.01 | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2026-33113 | Med | 0.35 | 5.4 | 0.01 | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
- risk 0.42cvss 6.5epss 0.01
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- risk 0.42cvss 6.5epss 0.02
Microsoft SharePoint Server Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.02
Microsoft SharePoint Server Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.41cvss 6.3epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.41cvss 6.3epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.40cvss 6.1epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Office Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Word Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Microsoft Word Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.03
Microsoft Office Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.02
Microsoft Office Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.03
Microsoft Office Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.06
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft…
- risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
- risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Page 9 of 12