3586 matches found
Security Updates for Microsoft SharePoint Server Subscription Edition (January 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...
Security Updates for Microsoft SharePoint Server 2016 (January 2026)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2025-64672 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2025-64672
CVE-2025-64672 is a cross-site scripting issue in Microsoft Office SharePoint (and related SharePoint Server components) caused by improper neutralization of input during web page generation. An authorized attacker can spoof the user interface over a network, potentially compromising user experie...
CVE-2025-64672 Microsoft SharePoint Server Spoofing Vulnerability
...
Description of the security update for SharePoint Server 2016: December 9, 2025 (KB5002821)
None None...
Description of the security update for SharePoint Server Subscription Edition: December 9, 2025 (KB5002815)
None None...
Description of the security update for SharePoint Server 2016 Language Pack: December 9, 2025 (KB5002804)
None None...
Description of the security update for SharePoint Server 2019: December 9, 2025 (KB5002816)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: December 9, 2025 (KB5002802)
None None...
Security Updates for Microsoft SharePoint Server 2016 (December 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft SharePoint Server Subscription Edition (December 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another...
Security Updates for Microsoft SharePoint Server 2019 (December 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
📄 Microsoft SharePoint Server ToolPane Authentication Bypass / Unsafe Deserialization
Proof of concept exploit for Microsoft SharePoint server that chains authentication bypass with unsafe deserialization to achieve complete system compromise without authentication...
Security Updates for Microsoft SharePoint Server Subscription Edition (November 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by remote code execution vulnerability: - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code ove...
Security Updates for Microsoft SharePoint Server 2016 (November 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by remote code execution vulnerability: - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Security Updates for Microsoft SharePoint Server 2019 (November 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by remote code execution vulnerability: - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Description of the security update for SharePoint Server Subscription Edition: November 11, 2025 (KB5002800)
None None...