4134 matches found
CVE-2025-30382
CVE-2025-30382 is a Microsoft SharePoint Server remote code execution vulnerability caused by deserialization of untrusted data in Office SharePoint. The CVE affects SharePoint Server environments and is exploitable locally with user interaction required (per CVSS vector: Local, Privileges=None, ...
CVE-2025-29976 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2025-29976
CVE-2025-29976 affects Microsoft SharePoint (Office SharePoint Server/SharePoint Server) with an elevation-of-privilege vulnerability due to improper privilege management. An attacker with local access and low privileges could elevate privileges on the affected system, as indicated by the CVE act...
Description of the security update for SharePoint Server 2019 Language Pack: May 13, 2025 (KB5002706)
None None...
Description of the security update for SharePoint Server Subscription Edition: May 13, 2025 (KB5002709)
None None...
Description of the security update for SharePoint Server 2019: May 13, 2025 (KB5002708)
None None...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...
Description of the security update for SharePoint Enterprise Server 2016: May 13, 2025 (KB5002722)
None None...
Security Updates for Microsoft SharePoint Server 2019 (May 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability CVE-2025-29976 - Remote Code Execution Vulnerabilites. CVE-2025-30378, CVE-2025-30382, CVE-2025-30384...
Security Updates for Microsoft SharePoint Server Subscription Edition (May 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability CVE-2025-29976 - Remote Code Execution Vulnerabilites. CVE-2025-30378, CVE-2025-30382,...
Microsoft Office SharePoint Server code-related vulnerabilities
Microsoft Office Sharepoint Server is a web-based content management and collaboration tool designed for enterprise customers by Microsoft. The initial version of the software existed in the form of Office components, and is still greatly dependent on Office to provide enterprise portals, documen...
Microsoft Office SharePoint Server code-related vulnerabilities
Microsoft Office Sharepoint Server is a web-based content management and collaboration tool designed for enterprise customers by Microsoft. The initial version of the software existed in the form of Office components, and is still greatly dependent on Office to provide enterprise portals, documen...
Security Updates for Microsoft SharePoint Server 2016 (May 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability CVE-2025-29976 - Remote Code Execution Vulnerabilites. CVE-2025-30378, CVE-2025-30382, CVE-2025-30384...
KLA83573 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Excel can be...
Microsoft SharePoint Server Deserialization RCE
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SharePoint Server Authentication Bypass RCE
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Stopping attacks against on-premises Exchange Server and SharePoint Server with AMSI
Exchange Server and SharePoint Server are business-critical assets and considered crown jewels for many organizations, making them attractive targets for attacks. To help customers protect their environments and respond to these attacks, Exchange Server and SharePoint Server now integrate with th...
VulnCheck KEV: CVE-2024-38024
Microsoft SharePoint Server Remote Code Execution Vulnerability...