Product by Microsoft
Microsoft SharePoint
256 known vulnerabilities in Microsoft SharePoint (Microsoft), 5 of them actively exploited (CISA KEV).
Key figures
256
Vulnerabilities
5
Actively exploited (KEV)
3
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-0604 | Microsoft SharePoint Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 5 other products | 9.8 | |
| Critical | CVE-2025-49706 | Microsoft SharePoint Server Spoofing Vulnerability In CISA KEVRansomwarealso in 4 other products | 6.5 | |
| Critical | CVE-2023-24955 | Microsoft SharePoint Server Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 4 other products | 7.2 | |
| Critical | CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability In CISA KEValso in 16 other products | 7.8 | |
| Critical | CVE-2017-11826 | Microsoft Office Remote Code Execution Vulnerability In CISA KEValso in 7 other products | 7.8 | |
| Critical | CVE-2023-21716 | Microsoft Word Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2025-47166 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-47163 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-38053 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-35823 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-37961 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2020-1181 | Microsoft SharePoint Server: Remote Code Execution | 8.8 | |
| High | CVE-2020-16952 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.6 | |
| High | CVE-2020-0932 | Microsoft SharePoint Enterprise Server: Remote Code Execution | 8.8 | |
| High | CVE-2021-31181 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-29793 | Microsoft SharePoint Remote Code Execution Vulnerability | 7.2 | |
| High | CVE-2017-8512 | Microsoft Office: Remote Code Execution | 8.8 | |
| High | CVE-2025-29794 | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2020-1439 | Microsoft SharePoint Enterprise Server: Remote Code Execution | 8.8 | |
| High | CVE-2018-1028 | Microsoft Word: Remote Code Execution | 8.8 | |
| High | CVE-2022-22005 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2021-40487 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.1 | |
| High | CVE-2018-8284 | Microsoft .NET Framework: Code Injection | 8.1 | |
| High | CVE-2018-8300 | Microsoft SharePoint: Remote Code Execution | 8.8 | |
| Critical | CVE-2020-1025 | Microsoft Office Elevation of Privilege Vulnerability | 9.8 |