MS
Product
Microsoft SharePoint Enterprise Server 2016
On CISA KEVExploited in the wildRansomware-linked
180
CVEs
13
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 8High 108Medium 62Low 2
Watch
Add Microsoft SharePoint Enterprise Server 2016 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-59235 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5522.1000 |
| CVE-2025-54905 | 7.1 | Sep 9 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.5517.1000 |
| CVE-2025-53760 | 7.1 | Aug 12 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.5513.1002 |
| CVE-2026-20943 | 7.0 | Jan 13 | Microsoft Office Click-To-Run Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5535.1001 |
| CVE-2025-62555 | 7.0 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5530.1000 |
| CVE-2025-59221 | 7.0 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5522.1000 |
| CVE-2025-30384 | 7.0 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5500.1001 |
| CVE-2025-30378 | 7.0 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.5500.1001 |