Product by Microsoft
Microsoft Sharepoint Enterprise Server 2016
336 known vulnerabilities in Microsoft Sharepoint Enterprise Server 2016 (Microsoft), 13 of them actively exploited (CISA KEV).
Key figures
336
Vulnerabilities
13
Actively exploited (KEV)
6
Used by ransomware
19
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-53770 | Microsoft SharePoint Server Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2025-49704 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2026-45659 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2025-49706 | Microsoft SharePoint Server Spoofing Vulnerability In CISA KEVRansomware | 6.5 | |
| Critical | CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass Vulnerability In CISA KEV | 9.1 | |
| Critical | CVE-2026-58644 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2024-38094 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEVRansomware | 7.2 | |
| Critical | CVE-2023-24955 | Microsoft SharePoint Server Remote Code Execution Vulnerability In CISA KEVRansomware | 7.2 | |
| Critical | CVE-2026-20963 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2026-32201 | Microsoft SharePoint Server Spoofing Vulnerability In CISA KEV | 6.5 | |
| Critical | CVE-2026-65660 | Microsoft SharePoint Server Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability In CISA KEV | 5.3 | |
| High | CVE-2026-20947 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-54897 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | |
| Critical | CVE-2023-21716 | Microsoft Word Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2025-49712 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-47166 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-47163 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-38018 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-21318 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-21400 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.0 | |
| High | CVE-2022-44690 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-38053 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2023-33157 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 |
News
- NCSC-2026-0422 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attackssecurityweek,
- SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wildthehackernews,
- SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCEthehackernews,
- NCSC-2026-0286 [1.01] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,