9991 matches found
CVE-2026-20947
CVE-2026-20947 is a Microsoft SharePoint/Office SharePoint Remote Code Execution vulnerability caused by improper neutralization of SQL elements in SharePoint. An attacker can trigger code execution over the network with low privileges and no user interaction on affected SharePoint Server deploym...
CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability
...
EUVD-2026-2114
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-2101
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-20959 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-20963
CVE-2026-20963 is a Microsoft SharePoint vulnerability described as deserialization of untrusted data (CWE-502) that enables a network-based code execution attack. The current description states an unauthenticated attacker can execute code over the network. Vendor discussions note a CVSSv3.1 vect...
CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-20959 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-20959
CVE-2026-20959 is a cross-site scripting vulnerability in Microsoft Office SharePoint (Server/Subscription Edition) caused by improper neutralization of input during web page generation. An authorized attacker could spoof a user over the network. Affected products include SharePoint Server (2016/...
CVE-2026-20951 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20951 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20951
CVE-2026-20951 is a Microsoft SharePoint Server Remote Code Execution vulnerability caused by improper input validation in SharePoint. The issue allows an unauthenticated or authenticated attacker to execute code locally on affected SharePoint Server deployments. Documented affected products incl...
Description of the security update for SharePoint Server 2016: January 13, 2026 (KB5002828)
None None...
Description of the security update for SharePoint Server 2016 Language Pack: January 13, 2026 (KB5002827)
None None...
Description of the security update for SharePoint Server 2019: January 13, 2026 (KB5002825)
None None...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...