MS
Product
Microsoft SharePoint Enterprise Server 2016
On CISA KEVExploited in the wildRansomware-linked
180
CVEs
13
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 8High 108Medium 62Low 2
Watch
Add Microsoft SharePoint Enterprise Server 2016 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-49070 | 7.4 | Dec 10 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5478.1000 |
| CVE-2025-29793 | 7.2 | Apr 8 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5495.1002 |
| CVE-2025-21348 | 7.2 | Jan 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5483.1001 |
| CVE-2024-38228 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5465.1001 |
| CVE-2024-38227 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5465.1001 |
| CVE-2024-43464 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5465.1001 |
| CVE-2024-38024 | 7.2 | Jul 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5456.1000 |
| CVE-2024-38023 | 7.2 | Jul 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5456.1000 |
| CVE-2024-30044 | 7.2 | May 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5448.1000 |
| CVE-2025-59232 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5522.1000 |
| CVE-2025-59235 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5522.1000 |
| CVE-2025-54905 | 7.1 | Sep 9 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5517.1000 |
| CVE-2025-53760 | 7.1 | Aug 12 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5513.1002 |
| CVE-2026-20943 | 7.0 | Jan 13 | Microsoft Office Click-To-Run Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5535.1001 |
| CVE-2025-62555 | 7.0 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5530.1000 |
| CVE-2025-59221 | 7.0 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5522.1000 |
| CVE-2025-30384 | 7.0 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5500.1001 |
| CVE-2025-30378 | 7.0 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5500.1001 |
| CVE-2026-62839 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-58639 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-63516 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-63512 | 6.5 | Aug 11 | Microsoft SharePoint Server Tampering Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-62837 | 6.5 | Aug 11 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-55051 | 6.5 | Jul 14 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-54108 | 6.5 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2025-53771 | 6.5 | Jul 20 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5513.1001 |
| CVE-2024-49062 | 6.5 | Dec 10 | Microsoft SharePoint Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5478.1000 |
| CVE-2024-49064 | 6.5 | Dec 10 | Microsoft SharePoint Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5478.1000 |
| CVE-2025-21393 | 6.3 | Jan 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5483.1001 |
| CVE-2025-53736 | 6.2 | Aug 12 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5513.1002 |
| CVE-2026-97783 | 6.1 | Oct 13 | Microsoft Office SharePoint Spoofing Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-33113 | 6.1 | Jun 9 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2026-55121 | 5.5 | Jul 14 | Microsoft Office Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-56192 | 5.5 | Jul 14 | Microsoft Office Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55142 | 5.5 | Jul 14 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55124 | 5.5 | Jul 14 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55050 | 5.5 | Jul 14 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55047 | 5.5 | Jul 14 | Microsoft Office Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55028 | 5.5 | Jul 14 | Microsoft Office Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55027 | 5.5 | Jul 14 | Microsoft Office Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55026 | 5.5 | Jul 14 | Microsoft Office Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-55023 | 5.5 | Jul 14 | Microsoft Office Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |
| CVE-2026-44821 | 5.5 | Jun 9 | Microsoft Office Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5556.1005 |
| CVE-2024-49065 | 5.5 | Dec 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5478.1000 |
| CVE-2026-64916 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-64902 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-64900 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-64897 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-64922 | 5.4 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5565.1001 |
| CVE-2026-62826 | 5.4 | Jul 16 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.5561.1001 |