MS
Product
Microsoft SharePoint Server Subscription Edition
On CISA KEVExploited in the wildRansomware-linked
221
CVEs
12
On KEV
9.8
Max CVSS
38
New 30D
Severity mix
Critical 9High 126Medium 82Low 4
Watch
Add Microsoft SharePoint Server Subscription Edition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44819 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |
| CVE-2026-45471 | 7.8 | Jun 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |
| CVE-2026-45475 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20384 |
| CVE-2026-26113 | 7.8 | Mar 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19725.20076 |
| CVE-2026-20951 | 7.8 | Jan 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19127.20442 |
| CVE-2025-30382 | 7.8 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.18526.20286 |
| CVE-2025-29976 | 7.8 | May 13 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.18526.20286 |
| CVE-2025-21344 | 7.8 | Jan 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17928.20356 |
| CVE-2024-43503 | 7.8 | Oct 8 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.17928.20162 |
| CVE-2024-30100 | 7.8 | Jun 11 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17328.20362 |
| CVE-2024-21426 | 7.8 | Mar 12 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17328.20136 |
| CVE-2026-69683 | 7.7 | Sep 8 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.20326.20082 |
| CVE-2026-88206 | 7.5 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-70202 | 7.5 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-70251 | 7.5 | Oct 13 | Microsoft Office SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-69804 | 7.5 | Sep 8 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.20326.20090 |
| CVE-2026-21511 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 16.0.0 before 16.0.19127.20518 |
| CVE-2026-21260 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 16.0.0 before 16.0.19127.20518 |
| CVE-2024-43466 | 7.5 | Sep 10 | Microsoft SharePoint Server Denial of Service Vulnerability Affected: 16.0.0 before 16.0.17928.20086 |
| CVE-2024-32987 | 7.5 | Jul 9 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.17328.20424 |
| CVE-2024-30043 | 7.5 | May 14 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.17328.20292 |
| CVE-2026-105013 | 7.4 | Oct 13 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2024-49070 | 7.4 | Dec 10 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17928.20290 |
| CVE-2026-88204 | 7.3 | Oct 13 | Microsoft Office SharePoint Spoofing Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-70267 | 7.2 | Oct 13 | Microsoft Office SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2025-29793 | 7.2 | Apr 8 | Microsoft SharePoint Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.18526.20172 |
| CVE-2025-21348 | 7.2 | Jan 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17928.20356 |
| CVE-2024-38228 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17928.20086 |
| CVE-2024-38227 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17928.20086 |
| CVE-2024-43464 | 7.2 | Sep 10 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17928.20086 |
| CVE-2024-38024 | 7.2 | Jul 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17328.20424 |
| CVE-2024-38023 | 7.2 | Jul 9 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17328.20424 |
| CVE-2024-30044 | 7.2 | May 14 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.17328.20292 |
| CVE-2025-53760 | 7.1 | Aug 12 | Microsoft SharePoint Elevation of Privilege Vulnerability Affected: 16.0.0 before 16.0.18526.20518 |
| CVE-2026-20943 | 7.0 | Jan 13 | Microsoft Office Click-To-Run Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.19127.20442 |
| CVE-2025-30384 | 7.0 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.18526.20286 |
| CVE-2025-30378 | 7.0 | May 13 | Microsoft SharePoint Server Remote Code Execution Vulnerability Affected: 16.0.0 before 16.0.18526.20286 |
| CVE-2026-97782 | 6.8 | Oct 13 | Microsoft Office SharePoint Tampering Vulnerability Affected: All versions, or not specified |
| CVE-2026-85932 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-70298 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-70259 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-105719 | 6.5 | Oct 13 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-102865 | 6.5 | Oct 13 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.20326.20190 |
| CVE-2026-69636 | 6.5 | Sep 8 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.20326.20082 |
| CVE-2026-69409 | 6.5 | Sep 8 | Microsoft Office SharePoint Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.20326.20090 |
| CVE-2026-62839 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.19725.20522 |
| CVE-2026-58639 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.19725.20522 |
| CVE-2026-63516 | 6.5 | Aug 11 | Microsoft SharePoint Server Spoofing Vulnerability Affected: 16.0.0 before 16.0.19725.20522 |
| CVE-2026-63512 | 6.5 | Aug 11 | Microsoft SharePoint Server Tampering Vulnerability Affected: 16.0.0 before 16.0.19725.20522 |
| CVE-2026-62837 | 6.5 | Aug 11 | Microsoft SharePoint Server Information Disclosure Vulnerability Affected: 16.0.0 before 16.0.19725.20522 |