MS
Product
Microsoft SharePoint Enterprise Server 2016
On CISA KEVExploited in the wildRansomware-linked
180
CVEs
13
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 8High 108Medium 62Low 2
Watch
Add Microsoft SharePoint Enterprise Server 2016 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40368 | 8.0 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5552.1002 |
| CVE-2025-62204 | 8.0 | Nov 11 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5526.1001 |
| CVE-2025-21400 | 8.0 | Feb 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5487.1000 |
| CVE-2026-55130 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55128 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55134 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55132 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55038 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55055 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55127 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55033 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55032 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55125 | 7.8 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-44824 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-44819 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-45471 | 7.8 | Jun 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-45475 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-26113 | 7.8 | Mar 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5543.1000 |
| CVE-2026-20948 | 7.8 | Jan 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5535.1001 |
| CVE-2026-20951 | 7.8 | Jan 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5535.1001 |
| CVE-2025-62559 | 7.8 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5530.1000 |
| CVE-2025-62558 | 7.8 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5530.1000 |
| CVE-2025-62562 | 7.8 | Dec 9 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5530.1000 |
| CVE-2025-59222 | 7.8 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5522.1000 |
| CVE-2025-54906 | 7.8 | Sep 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5517.1000 |
| CVE-2025-49703 | 7.8 | Jul 8 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5508.1000 |
| CVE-2025-47169 | 7.8 | Jun 10 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5504.1001 |
| CVE-2025-47168 | 7.8 | Jun 10 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5504.1001 |
| CVE-2025-30382 | 7.8 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5500.1001 |
| CVE-2025-29976 | 7.8 | May 13 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5500.1001 |
| CVE-2025-29820 | 7.8 | Apr 8 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5495.1002 |
| CVE-2025-27747 | 7.8 | Apr 8 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5495.1002 |
| CVE-2025-21344 | 7.8 | Jan 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5483.1001 |
| CVE-2024-43503 | 7.8 | Oct 8 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5469.1000 |
| CVE-2024-30100 | 7.8 | Jun 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5452.1000 |
| CVE-2026-21511 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 16.0.0 before 16.0.5539.1002 |
| CVE-2026-21260 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 16.0.0 before 16.0.5539.1002 |
| CVE-2024-43466 | 7.5 | Sep 10 | Microsoft SharePoint Server Denial of Service Vulnerability Affected: 16.0.0 before 16.0.5465.1001 |
| CVE-2024-32987 | 7.5 | Jul 9 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5456.1000 |
| CVE-2024-30043 | 7.5 | May 14 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5448.1000 |
| CVE-2024-49070 | 7.4 | Dec 10 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5478.1000 |
| CVE-2025-29793 | 7.2 | Apr 8 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5495.1002 |
| CVE-2025-21348 | 7.2 | Jan 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5483.1001 |
| CVE-2024-38228 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5465.1001 |
| CVE-2024-38227 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5465.1001 |
| CVE-2024-43464 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5465.1001 |
| CVE-2024-38024 | 7.2 | Jul 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5456.1000 |
| CVE-2024-38023 | 7.2 | Jul 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5456.1000 |
| CVE-2024-30044 | 7.2 | May 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5448.1000 |
| CVE-2025-59232 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5522.1000 |