CVE-2021-31948

CVE-2021-31948 technical details are not publicly provided in the supplied documents. Monitor for updates.

CVE-2017-8742

Two CVEs (CVE-2017-8742 and CVE-2017-8743) describe remote code execution in Microsoft PowerPoint family and associated server/web apps due to improper handling of objects in memory. CVE-2017-8742 affects PowerPoint up to 2016, PowerPoint Viewer 2007, SharePoint Server 2013 SP1, SharePoint Enterp...

CVE-2019-1203

The CVE-2019-1203 entry refers to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by insufficient sanitization of crafted web requests. An authenticated attacker could exploit this to run scripts in the user’s browser, access restricted content, perform actions on...

CVE-2017-0003

CVE-2017-0003 affects Microsoft Word 2016 and SharePoint Enterprise Server 2016 (Office memory corruption vulnerability). The underlying issue is a memory handling flaw that can allow remote code execution when a specially crafted Office file is opened. In affected products, exploitation requires...

CVE-2020-1447

CVE-2020-1447 is a Microsoft Word remote code execution vulnerability tied to how Word handles objects in memory. Connected sources corroborate that it affects Word and can allow an attacker to run code in the context of the current user when a specially crafted file is opened or processed. The N...

CVE-2019-0778

CVE-2019-0778 is a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by inadequate sanitization of crafted web requests. Affected products include SharePoint Server components; remediation is the March 2019 security update (KB4462208 / MS19-4462184) addressing the vul...

CVE-2022-38053

CVE-2022-38053 is a Microsoft SharePoint Server remote code execution vulnerability. According to the NCSC advisory, the issue affects Microsoft SharePoint (Office/SharePoint) and can lead to execution of arbitrary code with high impact (CVSS v3.1: 8.8, Network access, Low attack complexity, Priv...

CVE-2020-1345

CVE-2020-1345 corresponds to a Microsoft SharePoint Server XSS vulnerability. The issue arises when SharePoint Server fails to sanitize certain crafted web requests, enabling an authenticated attacker to execute scripts in the user’s browser and potentially read restricted content, perform action...

CVE-2021-38651

CVE-2021-38651 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources confirm affected product: SharePoint Server, and root cause involves spoofing capabilities likely allowing an attacker to impersonate legitimate users/services over the network. The CVE’s published metrics f...

CVE-2022-44693

CVE-2022-44693 is a Microsoft SharePoint Server remote code execution vulnerability. Connected sources confirm impact on SharePoint Server components and indicate remediation via security updates: KB5002321 (SharePoint Server 2016) addresses the vulnerability with a 16.0.5374.1000 build in the up...

CVE-2019-1034

CVE-2019-1034 affects Microsoft Word/Office where in-memory handling of objects can be exploited to run remote code after a user opens a crafted file. Exploitation relies on social/vector delivery (email or web), with the attacker gaining the same rights as the logged-on user. The vulnerability i...

CVE-2020-0926

Technical details for CVE-2020-0926 are not publicly available in the provided documents. Monitor for updates from official sources to confirm affected products, vectors, and mitigations.

CVE-2020-1444

CVE-2020-1444 is described across multiple connected sources as a remote code execution vulnerability in Microsoft SharePoint, triggered by parsing specially crafted email messages. The Red Hat and CNVD entries reiterate the same root cause, and Nessus-based scans list CVE-2020-1444 among several...

CVE-2019-1134

CVE-2019-1134 corresponds to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server arising when a specially crafted web request is not properly sanitized. The provided connected documents consistently describe this XSS issue in SharePoint Server without detailing affected vers...

CVE-2022-35823

The connected KB describes Security Update KB5002271 for SharePoint Server Subscription Edition (Sept 13, 2022) addressing remote code execution vulnerabilities including CVE-2022-35823. It notes this update resolves multiple RCE issues, requires the base SharePoint Server Subscription Edition re...

CVE-2022-41062

CVE-2022-41062 is a Microsoft SharePoint Server remote code execution vulnerability. Public details shown in connected docs indicate it affects multiple SharePoint products (Foundation 2013, Server 2016/2019, Subscription Edition) and is exploitable via remote attack with high impact (CVSS 3.1: 8...

CVE-2019-1446

CVE-2019-1446 describes an information-disclosure vulnerability in Microsoft Excel/Office where memory contents may be exposed due to improper handling of memory objects. The issue is discussed in connected Nessus/OpenVAS entries tied to November 2019 Office/Excel security updates, indicating aff...

CVE-2020-1445

CVE-2020-1445 is an information disclosure vulnerability in Microsoft Office (notably Word) related to how memory contents are disclosed. The initial description specifies memory disclosure without providing exploit specifics. Connected Nessus entries for Word/Office July 2020 corroborate that CV...

CVE-2020-1450

CVE-2020-1450 is an XSS vulnerability affecting Microsoft SharePoint Server. The issue arises from improper sanitization of crafted web requests to the SharePoint server, enabling script execution in the user's context. Documented references (CNVD entries and Nessus plugin notes) corroborate Cros...

CVE-2020-1595

CVE-2020-1595 is a Microsoft SharePoint remote code execution vulnerability. The issue arises from unsafe deserialization of untrusted data by SharePoint APIs, allowing an attacker to run arbitrary code in the SharePoint application pool and farm account if they can access a susceptible API with ...

CVE-2020-17017

CVE-2020-17017 is referenced across multiple vulnerability update plugins for Microsoft SharePoint Server in the context of missing security updates released in November 2020. The connected documents indicate this CVE is part of a set of vulnerabilities affecting SharePoint Server installations (...

CVE-2020-1178

Technical details for CVE-2020-1178 are not publicly provided in the supplied documents; no affected versions, root cause, exploitation details, or mitigations are shown. Monitor for official advisories to obtain concrete information.

CVE-2021-1717

CVE-2021-1717 is a Microsoft SharePoint Server spoofing vulnerability. NVD data shows a CVSS v3.1 base score 5.4 (MEDIUM) with network access, no privileges required, but user interaction needed. Confidentiality and integrity impacts are marked as low; availability impact is none. Several Nessus/...

CVE-2020-1448

CVE-2020-1448 corresponds to a Remote Code Execution vulnerability in Microsoft Word. The issue arises when Word fails to properly handle objects in memory, enabling an attacker to run code in the context of the current user. The connected Nessus entries corroborate that CVE-2020-1448 is grouped ...

CVE-2020-1499

CVE-2020-1499 is a spoofing vulnerability in Microsoft SharePoint Server where specially crafted web requests are not properly sanitized. An authenticated attacker could exploit it to perform cross-site scripting (XSS) and to run scripts in the user’s security context, potentially reading restric...

CVE-2017-11876

CVE-2017-11876 affects Microsoft Project Server and SharePoint Enterprise Server 2016. The vulnerability arises from improper session handling that enables cross-site request forgery, allowing an attacker to read restricted content and impersonate the victim to perform actions (e.g., change permi...

CVE-2020-1099

CVE-2020-1099 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. The provided documents identify the vulnerability type and affected product (Microsoft SharePoint Server) but do not specify affect...

CVE-2020-1505

CVE-2020-1505 is an Information Disclosure vulnerability affecting Microsoft SharePoint Server where in-memory objects are mishandled. An attacker must log on to an affected system and run a specially crafted application to obtain information that could help compromise the user’s system. The issu...

CVE-2020-16979

CVE-2020-16979 is an Information Disclosure Vulnerability in Microsoft SharePoint. Connected documents confirm the issue affects SharePoint Server installations and is addressed via November 2020 security updates (e.g., MS20-4486x/MS20-4487x). The exact root cause details are not disclosed in the...

CVE-2021-1719

Technical details about CVE-2021-1719 are not publicly provided in the connected documents. The materials reference SharePoint elevation of privilege but do not specify affected versions, root cause, or fixes. Monitor for updates.

CVE-2019-0831

CVE-2019-0831 is a Microsoft SharePoint Server XSS vulnerability. The connected sources indicate an XSS caused by improper sanitization of specially crafted web requests to an affected SharePoint server. The CVE-2019-0831 entry is distinct from CVE-2019-0830. No explicit exploit details, affected...

CVE-2020-1440

CVE-2020-1440 describes a tampering vulnerability in Microsoft SharePoint Server where an authenticated attacker can modify a targeted user’s profile data by sending a specially crafted request. The root cause is SharePoint’s improper handling of profile data. The impact, as stated, is the abilit...

CVE-2020-16942

CVE-2020-16942 is an information-disclosure vulnerability in Microsoft SharePoint Server. The issue arises when rendering specific web pages, allowing an attacker with access to the affected page to view the folder path of scripts loaded on that page due to improper disclosure of folder structure...

CVE-2020-17060

CVE-2020-17060 is a Microsoft SharePoint spoofing vulnerability affecting multiple SharePoint Server versions (2010, 2013, 2016, 2019). The connected Nessus entries associate this CVE with security updates released in November 2020 to address spoofing alongside other SharePoint vulnerabilities (e...

CVE-2025-47168

CVE-2025-47168 (Microsoft Word RCE) is a use-after-free vulnerability in Word that allows an attacker to execute code locally after triggering with a crafted file or object. The issue is in Word component handling, leading to arbitrary code execution with the attacker’s privileges; the CVSS detai...

CVE-2019-1031

Microsoft SharePoint Server has an XSS vulnerability (CVE-2019-1031) due to improper sanitization of crafted web requests. An authenticated attacker could run scripts in the user’s browser, read restricted content, and perform actions on the SharePoint site (e.g., change permissions, delete conte...

CVE-2025-29820

CVE-2025-29820 is a Microsoft Word remote code execution vulnerability caused by a use-after-free in Word. The public descriptions consistently state local code execution by an attacker after exploiting this flaw. The affected product is Microsoft Word (Office). Exploitation details are not publi...

CVE-2020-1323

CVE-2020-1323 is a Microsoft SharePoint open redirect vulnerability. The available documents confirm an open redirect that could lead to spoofing via a crafted URL. No concrete affected versions or patch details are provided in the supplied sources; refer to the linked advisory for remediation gu...

CVE-2020-1456

CVE-2020-1456 is a SharePoint Server cross-site scripting (XSS) vulnerability. The initial doc describes exploitation via an improperly sanitized crafted web request, enabling script execution in the user’s context (XSS). Connected documents (CNVD entries) corroborate a SharePoint Server XSS weak...

CVE-2020-1573

CVE-2020-1573 is a Microsoft SharePoint Server cross-site scripting (XSS) vulnerability. The root cause is improper sanitization of crafted web requests, which an authenticated attacker could exploit to execute scripts in the user’s browser context, potentially reading restricted data, acting on ...

CVE-2017-11820

The CVE-2017-11820 entry describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016. The root cause is a sanitization flaw in SharePoint Server that allows crafting requests to bypass proper input handling. Impact ...

CVE-2019-1257

CVE-2019-1257 is a Microsoft SharePoint Remote Code Execution vulnerability where APIs fail to check the source markup of an uploaded application package. The issue is documented across multiple sources as affecting SharePoint Server (version lines cited by Nessus plugins), with the root cause be...

CVE-2020-0893

CVE-2020-0893 is a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. Affected software is SharePoint Server (no explicit version range provided in the documents). The issue is documented in the NVD entry and...

CVE-2020-0978

Technical details for CVE-2020-0978 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for official updates.

CVE-2020-17015

CVE-2020-17015 is a Microsoft SharePoint Server Spoofing Vulnerability. The connected sources confirm this vulnerability affects SharePoint Server in on‑premises deployments and indicate the root issue is spoofing (authentication-related) with an impact on integrity (I) and network access as the ...

CVE-2019-1036

CVE-2019-1036 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where an attacker with authentication can exploit insufficient sanitization of crafted web requests. Successful exploitation could allow the attacker to execute scripts in the user’s browser, read co...

CVE-2019-1328

CVE-2019-1328: A spoofing vulnerability in Microsoft SharePoint Server arises from improper sanitization of specially crafted web requests. Affected product: SharePoint Server (on-premises). Root cause: insufficient sanitization leading to spoofing. Impact per available data: confidentiality impa...

CVE-2020-0694

Public technical details about CVE-2020-0694 (affected product, version, exploit details, or fix) are not provided in the connected documents. Monitor for updates from official advisories and security feeds.

CVE-2020-1100

CVE-2020-1100 is an XSS vulnerability in Microsoft SharePoint Server where improper sanitization of a specially crafted web request can lead to compromised data in affected SharePoint deployments. The vulnerability affects SharePoint Server components handling input to web requests; CVSS v3.1 vec...

CVE-2020-1205

CVE-2020-1205 affects Microsoft SharePoint Server. The vulnerability arises from improper sanitization of crafted web requests, enabling an authenticated attacker who can reach an affected SharePoint server to perform cross-site scripting and execute scripts in the user’s security context. This c...