MS
Product
Microsoft SharePoint Server Subscription Edition
On CISA KEVExploited in the wildRansomware-linked
237
CVEs
12
On KEV
9.8
Max CVSS
38
New 30D
Severity mix
Critical 9High 136Medium 88Low 4
Watch
Add Microsoft SharePoint Server Subscription Edition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-59237 | 8.8 | Oct 14 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19127.20262 |
| CVE-2025-59228 | 8.8 | Oct 14 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19127.20262 |
| CVE-2025-54897 | 8.8 | Sep 9 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19127.20100 |
| CVE-2025-49701 | 8.8 | Jul 8 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.18526.20424 |
| CVE-2025-47172 | 8.8 | Jun 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.18526.20396 |
| CVE-2025-47166 | 8.8 | Jun 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.18526.20396 |
| CVE-2025-47163 | 8.8 | Jun 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.18526.20396 |
| CVE-2025-29794 | 8.8 | Apr 8 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.18526.20172 |
| CVE-2024-38018 | 8.8 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17928.20086 |
| CVE-2024-21318 | 8.8 | Jan 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.10406.20000 |
| CVE-2023-36764 | 8.8 | Sep 12 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.16731.20180 |
| CVE-2023-33160 | 8.8 | Jul 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.16130.20642 |
| CVE-2023-33159 | 8.8 | Jul 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.16130.20642 |
| CVE-2023-33157 | 8.8 | Jul 11 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.16130.20642 |
| CVE-2023-33134 | 8.8 | Jul 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.16130.20642 |
| CVE-2022-38053 | 8.8 | Oct 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.15601.20158 |
| CVE-2022-41036 | 8.8 | Oct 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.15601.20158 |
| CVE-2022-41037 | 8.8 | Oct 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.15601.20158 |
| CVE-2022-41038 | 8.8 | Oct 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.15601.20158 |
| CVE-2026-70355 | 8.7 | Aug 11 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.19725.20522 |
| CVE-2026-55034 | 8.7 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55021 | 8.7 | Jul 14 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55045 | 8.4 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-45458 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |
| CVE-2026-45456 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |
| CVE-2026-40367 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20280 |
| CVE-2024-49068 | 8.2 | Dec 10 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.17928.20290 |
| CVE-2026-102866 | 8.1 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-63520 | 8.1 | Aug 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20522 |
| CVE-2026-47298 | 8.0 | Jun 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |
| CVE-2026-47294 | 8.0 | Jun 1 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20280 |
| CVE-2026-40368 | 8.0 | May 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20280 |
| CVE-2025-62204 | 8.0 | Nov 11 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19127.20338 |
| CVE-2025-21400 | 8.0 | Feb 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17928.20396 |
| CVE-2023-36892 | 8.0 | Aug 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.16130.20684 |
| CVE-2023-36891 | 8.0 | Aug 8 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.16130.20684 |
| CVE-2026-55130 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55128 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55134 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55132 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55038 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55055 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55127 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55033 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55032 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-55125 | 7.8 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20434 |
| CVE-2026-44824 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |
| CVE-2026-44819 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |
| CVE-2026-45471 | 7.8 | Jun 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |
| CVE-2026-45475 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |