CVE-2019-0951

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0950...

CVE-2019-0950

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0951...

CVE-2019-0952

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'...

CVE-2025-30384 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-30384 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-30384

CVE-2025-30384 describes a vulnerability in Microsoft Office SharePoint Server where deserialization of untrusted data can allow an unauthorized attacker to execute code locally. The affected products appear to be SharePoint Server variants (Enterprise/Standard) and SharePoint Server 2019/Subscri...

CVE-2025-30382 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-30382

CVE-2025-30382 is a Microsoft SharePoint Server remote code execution vulnerability caused by deserialization of untrusted data in Office SharePoint. The CVE affects SharePoint Server environments and is exploitable locally with user interaction required (per CVSS vector: Local, Privileges=None, ...

CVE-2025-30382 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-30378

CVE-2025-30378 is a Microsoft SharePoint vulnerability described as a deserialization of untrusted data in Office SharePoint that allows a local attacker to execute code. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with LOCAL attack vector, HIGH impact to confidentiality, integrity, a...

CVE-2025-30378 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-30378 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-29976 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2025-29976 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2025-29976

CVE-2025-29976 affects Microsoft SharePoint (Office SharePoint Server/SharePoint Server) with an elevation-of-privilege vulnerability due to improper privilege management. An attacker with local access and low privileges could elevate privileges on the affected system, as indicated by the CVE act...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally...

PT-2025-20978 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue concerns improper privilege management, allowing an authorized attacker to elevate privileges locally. This could potentially affect the system. Recommendation...

Security Updates for Microsoft SharePoint Server Subscription Edition (May 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability CVE-2025-29976 - Remote Code Execution Vulnerabilites. CVE-2025-30378, CVE-2025-30382,...