MS
Product
Microsoft SharePoint Server 2019
On CISA KEVExploited in the wildRansomware-linked
186
CVEs
14
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 9High 110Medium 65Low 2
Watch
Add Microsoft SharePoint Server 2019 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-30044 | 7.2 | May 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10409.20047 |
| CVE-2025-59232 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.10417.20059 |
| CVE-2025-59235 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.10417.20059 |
| CVE-2025-54905 | 7.1 | Sep 9 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.10417.20047 |
| CVE-2025-53760 | 7.1 | Aug 12 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.10417.20041 |
| CVE-2026-20943 | 7.0 | Jan 13 | Microsoft Office Click-To-Run Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20083 |
| CVE-2025-62555 | 7.0 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20075 |
| CVE-2025-59221 | 7.0 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20059 |
| CVE-2025-30384 | 7.0 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20010 |
| CVE-2025-30378 | 7.0 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10417.20010 |