CVE-2019-1443

CVE-2019-1443 is an information-disclosure vulnerability in Microsoft SharePoint Server. An authenticated attacker who uploads a specially crafted file could leverage SharePoint functionality to obtain SMB hashes, with impact described as partial confidentiality exposure. The issue arises from ho...

CVE-2020-0972

CVE-2020-0972 is a spoofing vulnerability in Microsoft SharePoint Server where a specially crafted web request is not properly sanitized. The issue is tied to SharePoint’s handling of spoofing-related requests and is listed among a set of April 2020 SharePoint vulnerabilities in the Nessus plugin...

CVE-2020-1101

CVE-2020-1101 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where the application does not properly sanitize a specially crafted web request. The issue affects SharePoint Server (per the CVE) and is corroborated by connected sources noting XSS in SharePoint S...

CVE-2020-1104

Technical details about CVE-2020-1104 are not publicly provided in the supplied documents. Monitor for updates from vendors and ENISA/NVD for confirmed fixes and affected products.

CVE-2020-1183

Technical details (vulnerable product specifics, root cause, exploit information, mitigation) for CVE-2020-1183 are not provided in the connected documents. Monitor for updates from official advisories and third-party sources.

CVE-2020-1443

CVE-2020-1443 describes a spoofing vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. Multiple connected sources (NVD, CNVD, and related Nessus entries) reiterate that SharePoint Server does not properly sanitize crafted requests, enab...

CVE-2020-1451

CVE-2020-1451 is a Microsoft SharePoint Server XSS vulnerability caused by improper sanitization of crafted web requests. Public data in the provided documents shows a CVSS v3.1 base score of 5.4 (Network, Low privileges, UI: Required, Scope: Changed; Confidentiality/Integrity: Low) and notes the...

CVE-2025-47169

CVE-2025-47169 affects Microsoft Word (Office) via a heap-based buffer overflow in Word, enabling local code execution. The vulnerability is confirmed by multiple sources (MSRC and related advisories) and is addressed by June 2025 Word security updates (e.g., KB5002729/KB5002732). Remediation: in...

CVE-2020-1298

Technical details for CVE-2020-1298 are not publicly provided in the connected documents. Monitor for updates; current materials do not specify affected products, root cause, impact, or fixes beyond the initial description.

CVE-2018-8568

The CVE-2018-8568/8572 family concerns Microsoft SharePoint Server. A vulnerability exists where SharePoint does not properly sanitize/filter a specially crafted web request sent to an affected SharePoint server, enabling an authenticated attacker to elevate privileges. Affected products: Microso...

CVE-2018-0922

CVE-2018-0922 is a remote code execution vulnerability arising from how Office objects are handled in memory across multiple Microsoft Office products (Word, Excel, SharePoint, Web Apps, Viewer, etc.). Connected sources confirm the issue affects a wide range of Office/SharePoint versions (e.g., O...

CVE-2021-43876

Technical details about CVE-2021-43876 (affected product, vector, impact, patch) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2018-0790

CVE-2018-0790 affects Microsoft SharePoint Foundation 2010, and Microsoft SharePoint Server 2013 and 2016. The vulnerability is an elevation of privilege due to the way web requests are handled in these products. The description lists the issue as a privilege escalation vulnerability and explicit...

CVE-2018-0799

CVE-2018-0799 is a cross-site scripting (XSS) vulnerability in Microsoft Access within SharePoint Server 2013 SP1 and SharePoint Server 2016, caused by improper sanitization of image field values edited in Design view. Exploitation can allow JavaScript execution in the victim’s browser, potential...

CVE-2019-1032

CVE-2019-1032 involves an XSS vulnerability in Microsoft SharePoint Server where unsanitized web requests can be exploited by an authenticated attacker. Exploitation would allow script execution in the user’s browser, potentially reading restricted content, acting on the user’s behalf (e.g., chan...

CVE-2019-0956

CVE-2019-0956 is described across connected sources as an information disclosure in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. The published remediation is a security update (MS19-4464564 family) that addresses SharePoint Server web-request sani...

CVE-2025-47172

CVE-2025-47172 refers to a Microsoft SharePoint Server remote code execution vulnerability caused by improper neutralization of certain SQL elements in SharePoint (SQL injection). An authenticated attacker could execute code remotely over the network. Affected products include SharePoint Server o...

CVE-2017-11936

CVE-2017-11936 affects Microsoft SharePoint Server 2016. An authenticated attacker can exploit improper sanitization of crafted web requests to escalate privileges, potentially causing cross-site scripting and actions on behalf of the user (read/change permissions, inject content). Remediation is...

CVE-2018-8518

Technical details about CVE-2018-8518 are not publicly provided in the supplied documents; no specifics on affected products beyond SharePoint, root cause, impact, or fixes are included. Monitor for official advisories for updates.

CVE-2020-1295

CVE-2020-1295 is an Elevation of Privilege in Microsoft SharePoint. The initial entry is supported by connected sources noting SharePoint vulnerabilities and an associated Microsoft security update (KB4484405) for SharePoint Server Enterprise 2013 that resolves CVE-2020-1295; other Nessus entries...

CVE-2020-1318

Technical details for CVE-2020-1318 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2020-1105

CVE-2020-1105 is a spoofing vulnerability affecting Microsoft SharePoint Server, caused by improper sanitization of a specially crafted web request. The linked sources (NVD entry and CVE records) consistently identify this as a spoofing issue distinct from CVE-2020-1104/1107. The available docume...

CVE-2025-47166

CVE-2025-47166 is a remote code execution vulnerability in Microsoft SharePoint Server/Office SharePoint caused by deserialization of untrusted data. An authenticated attacker could trigger code execution over the network on the affected server. The entry is tracked with a high CVSS v3.1 base sco...

CVE-2018-0944

Technical details for CVE-2018-0944 are not publicly available in the provided connected documents. Monitor for updates; based on current inputs, no concrete affected products, versions, exploit info, or remediation are disclosed here.

CVE-2018-8431

CVE-2018-8431 describes an elevation of privilege in Microsoft SharePoint Server and SharePoint when a specially crafted web request is not properly sanitized. Affected products: Microsoft SharePoint Server and Microsoft SharePoint. Root cause: insufficient sanitization/input validation of crafte...

CVE-2018-1005

CVE-2018-1005: Affected software is Microsoft SharePoint Server. The vulnerability is an elevation of privilege caused by improper sanitization of specially crafted web requests to affected SharePoint servers. The root cause is incomplete sanitization of user-supplied input in web requests, allow...

CVE-2018-0914

Technical details about CVE-2018-0914 are not publicly available in the provided documents. The connected EUVD entries mention malware without giving affected products, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2018-8572

CVE-2018-8572 affects Microsoft SharePoint, specifically SharePoint Server and SharePoint. The vulnerability arises because the server does not properly sanitize/filter a specially crafted web request, enabling an authenticated attacker to elevate privileges on the affected SharePoint Server. Con...

CVE-2018-0923

Technical details for CVE-2018-0923 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-8578

CVE-2018-8578 affects Microsoft SharePoint Server, where information is disclosed by improperly rendering certain pages, revealing the folder structure/script paths loaded on the page. Root cause: improper disclosure of the site’s folder path information during page rendering. Impact: information...

CVE-2021-42320

CVE-2021-42320 is a spoofing vulnerability affecting Microsoft SharePoint Server (including Subscription Edition and on-premises releases like 2016/2019). Exploitation could allow an attacker to perform actions with the privileges of another user. Microsoft’s December 2021 security update KB50020...

CVE-2018-0911

Technical details about CVE-2018-0911 are not publicly available in the provided documents; monitor for updates.

CVE-2018-8635

CVE-2018-8635 affects Microsoft SharePoint Server and SharePoint by an elevation-of-privilege flaw where an auth’d attacker can craft an authentication request to trigger server-side logic. Root cause: improper sanitization of a crafted authentication request, enabling code execution in the Share...

CVE-2018-8299

CVE-2018-8299 is an elevation-of-privilege vulnerability impacting Microsoft SharePoint Server. The issue arises when a specially crafted web request is not properly sanitized by the affected SharePoint server, allowing an attacker to escalate privileges. The CVE entry is separate from CVE-2018-8...

CVE-2018-0915

Technical details are not publicly available in the provided documents for CVE-2018-0915; no product/version specifics or remediation are disclosed here. Monitor for updates from official sources.

CVE-2025-53733

CVE-2025-53733 affects Microsoft Word (Office). The issue is caused by incorrect conversion between numeric types in Word, enabling a local attacker to execute arbitrary code when a specially crafted document is opened or when Preview Pane is used, per vendor descriptions and multiple security pa...

CVE-2018-0947

Technical details about CVE-2018-0947 are not provided in the supplied documents. Monitor for updates; no affected products, exploit info, or fixes are described here.

CVE-2018-0916

Technical details for CVE-2018-0916 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2025-47994

Microsoft Office Elevation of Privilege (CVE-2025-47994) is caused by deserialization of untrusted data within Office components. The vulnerability allows local privilege escalation. Affected products include Office 2016 family components (Word, Excel, PowerPoint, SharePoint), with exploits linke...

CVE-2018-8300

Technical details about CVE-2018-8300 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no confirmed affected versions, exploitation specifics, or remediation details are present here.

CVE-2018-0910

Technical details about CVE-2018-0910 are not publicly available in the provided documents; the connected EUVD entries refer to malware and do not specify affected products, impact, or remediation. Monitor for updates.

CVE-2018-0912

No technical details for CVE-2018-0912 are present in the provided documents. Monitor for updates as more information becomes available.

CVE-2018-1032

CVE-2018-1032 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server/SharePoint. The underlying issue is improper sanitization of specially crafted web requests to an affected SharePoint server, enabling an authenticated attacker to elevate privileges. Multiple public sources i...

CVE-2018-8650

CVE-2018-8650 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server, caused by improper sanitization of specially crafted web requests. The issue affects on‑premises SharePoint Server products (e.g., SharePoint Server 2013/2016/Enterprise Server variants and related ...

CVE-2018-0913

Technical details for CVE-2018-0913 are not publicly available in the provided documents; monitor for updates.

CVE-2018-8488

Technical details for CVE-2018-8488 are not provided in the connected documents. The materials reference a SharePoint elevation vulnerability but do not specify affected versions, root cause, impact, or remediation for this CVE.

CVE-2018-8428

CVE-2018-8428 affects Microsoft SharePoint Server. The issue stems from improper sanitization of a specially crafted web request, enabling elevation of privilege. Affected product: SharePoint Server. Root cause: input sanitization gap in the web request handling. Impact: potential privilege escal...

CVE-2018-0869

CVE-2018-0869 affects Microsoft SharePoint Server 2016. The issue is an elevation of privilege due to improper sanitization of web requests sent to an affected SharePoint server, allowing an authenticated attacker to gain higher privileges and potentially manipulate content. The vulnerability is ...

CVE-2018-8498

CVE-2018-8498 affects Microsoft SharePoint Server and is described as an elevation of privilege vulnerability caused by improper sanitization of a specially crafted web request. The CVSS v3 base score is 5.4 (MEDIUM) with network attack vector, low attack complexity, and user interaction required...

CVE-2018-0921

CVE-2018-0921 affects Microsoft SharePoint Server 2016. It describes an elevation of privilege vulnerability arising from how specially crafted web requests are sanitized. The entry notes this CVE is distinct from CVE-2018-0909/0910/0911/0912/0913/0914/0915/0916/0917/0923/0944/0947. CVSS data fro...