EUVD-2026-73740

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69904

A server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. The flaw requires user interaction and low privileges (CVSS 3.1: 3.5 – LOW ). CISA's SSVC assessment indicates no known exploitation , the vulner...

EUVD-2026-73724

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69417

CVE-2026-69417 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker with low privileges can perform spoofing over a network , requiring user interaction. The CVSS 3.1 score is 7...

CVE-2026-69268

CVE-2026-69268 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The assigned CVSS 3.1 score is 8.8 (HIGH) , with a vector of network attack, low complexity, and low privileges required, leading to high im...

CVE-2026-69683

CVE-2026-69683 is a server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint that allows an authorized attacker (low privileges) to disclose information over a network. The impact is classified as high confidentiality with no integrity or availability impact. NVD assigns a ...

EUVD-2026-73152

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2019-0604_sharepoint_CVE

CVE-2019-0604 CVE-2019-0604 来自 https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-45659

CVE-2026-45659 La deserialización de datos no confiables en Microsoft Office SharePoint permite a un atacante autorizado ejecutar código a través de la red. ⚡ Uso simple Use este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones ...

CVE-2019-0604

CVE-2019-0604 CVE-2019-0604 来自 https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

PT-2026-87491

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2026)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

...

CVE-2025-53770-Scanner

🛡️ Scanner de Vulnerabilidade CVE-2025-53770 no SharePoint Uma ferramenta baseada em Python para detectar instâncias vulneráveis do Microsoft SharePoint afetadas por CVE-2025-53770 , uma vulnerabilidade de desserialização insegura acionada através do endpoint ToolPane.aspx. O scanner envia um...

Patch Tuesday - August 2026

Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever...

CVE-2026-70321

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-65665

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-63520

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2026-62917

CVE-2026-62917 concerns Microsoft SharePoint (Office SharePoint) with an improper input validation flaw. The vulnerability allows an authorized attacker to perform spoofing over a network. Documents identify the affected product as SharePoint Server and describe the root cause as input validation...