Product by Microsoft
Microsoft Sharepoint Server Subscription Edition
271 known vulnerabilities in Microsoft Sharepoint Server Subscription Edition (Microsoft), 12 of them actively exploited (CISA KEV).
Key figures
271
Vulnerabilities
12
Actively exploited (KEV)
5
Used by ransomware
16
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-53770 | Microsoft SharePoint Server Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2026-45659 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2025-49706 | Microsoft SharePoint Server Spoofing Vulnerability In CISA KEVRansomware | 6.5 | |
| Critical | CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass Vulnerability In CISA KEV | 9.1 | |
| Critical | CVE-2026-58644 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2024-38094 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEVRansomware | 7.2 | |
| Critical | CVE-2023-24955 | Microsoft SharePoint Server Remote Code Execution Vulnerability In CISA KEVRansomware | 7.2 | |
| Critical | CVE-2026-20963 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2026-32201 | Microsoft SharePoint Server Spoofing Vulnerability In CISA KEV | 6.5 | |
| Critical | CVE-2026-65660 | Microsoft SharePoint Server Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability In CISA KEV | 5.3 | |
| High | CVE-2026-20947 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-54897 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | |
| Critical | CVE-2023-21716 | Microsoft Word Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2025-47166 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-47163 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-38018 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-21318 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-21400 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.0 | |
| High | CVE-2022-44690 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-38053 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2023-33157 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2023-21742 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-35823 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 |
News
- October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero dayscsoonline,
- NCSC-2026-0422 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attackssecurityweek,
- SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wildthehackernews,
- SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCEthehackernews,
- NCSC-2026-0286 [1.01] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,