CVE-2020-17118

CVE-2020-17118 is a remote code execution vulnerability in Microsoft SharePoint Server. The connected documents confirm it affects multiple SharePoint Server versions (2010, 2013, 2016, 2019) and that systems missing security updates are affected. No explicit root-cause details are provided in th...

CVE-2021-31966

CVE-2021-31966 is a Microsoft SharePoint Server remote code execution vulnerability. The connected documents confirm affected product families include SharePoint Server (2013/2016/2019 on-premises) and show that patches released June 8, 2021 (KB5001922/KB5001946, and related advisories) address t...

CVE-2020-1148

Technical details for CVE-2020-1148 are not publicly available in the provided documents. Connected sources reference SharePoint spoofing vulnerabilities in general, but do not map concrete affected versions, root cause, or fixes. Monitor for updates.

CVE-2021-34519

CVE-2021-34519 is a Microsoft SharePoint Server information disclosure vulnerability affecting on‑premises SharePoint Server variants. Connected documents confirm it is an information disclosure issue tied to SharePoint Server (2013/2016/Enterprise Server 2016) and reference security updates (e.g...

CVE-2022-30157

CVE-2022-30157 relates to Microsoft SharePoint Server remote code execution. CNVD-2022-59590 and the MSRC advisory KB5002224 describe a remote-code-execution vulnerability in SharePoint Server (Subscription Edition included). The patch KB5002224 (June 14, 2022) mitigates this by applying security...

CVE-2020-17121

No concrete technical details for CVE-2020-17121 are present in the provided connected documents; they only reference it among December 2020 SharePoint updates without specifics on affected components or root cause.

CVE-2021-1715

CVE-2021-1715 is a Microsoft Word Remote Code Execution vulnerability. The CVE is referenced in several January 2021 security-update advisories (Word/Office products) and appears in Nessus plugins cataloging Word and Office patches alongside related CVEs (e.g., CVE-2021-1716). The connected docum...

CVE-2021-31172

CVE-2021-31172 is a Microsoft SharePoint Server spoofing vulnerability. Public docs here indicate the issue is addressed by the May 11, 2021 security update for SharePoint Server 2019 (KB5001916), which also covers related CVEs in the same bulletin. The CVE entry cites a SharePoint spoofing vulne...

CVE-2023-21717

CVE-2023-21717 affects Microsoft SharePoint Server as an Elevation of Privilege vulnerability. Connected sources confirm affected SharePoint Server family (2013/2016/2019 and Subscription/Foundation variants) with multiple references to CVE-21717 and CVE-21716; the exact root cause is not detaile...

CVE-2025-27747

CVE-2025-27747 is a Use-After-Free vulnerability in Microsoft Word (Office) that can allow an attacker to execute arbitrary code. The CVE is documented as affecting Word with a local attack vector and high impact (execution of code, confidentiality/integrity/availability potentially impacted). Pu...

CVE-2013-1315

CVE-2013-1315 is a remote code execution/memory corruption vulnerability affecting Microsoft Office components. The public records identify affected products as Microsoft SharePoint Server 2007 SP3, 2010 SP1/SP2, 2013; Office Web Apps 2010; Excel 2003 SP3/2007 SP3/2010 SP1/SP2/2013/2013 RT; Offic...

CVE-2020-1198

CVE-2020-1198 is a Microsoft SharePoint Server XSS vulnerability where a crafted request to an affected SharePoint server is not properly sanitized. An authenticated attacker could execute scripts in the user’s browser, access data they aren’t authorized to read, and perform actions in the user’s...

CVE-2021-31963

CVE-2021-31963 is a Microsoft SharePoint Server remote code execution vulnerability affecting on-premises SharePoint Server. Connected sources confirm the issue exists and that Microsoft released fixes in June 2021 (e.g., KB5001954 for SharePoint Enterprise Server 2013 and related updates noted i...

CVE-2024-30044

CVE-2024-30044 is a Microsoft SharePoint Server Remote Code Execution vulnerability reported across multiple feeds. The connected docs identify the affected product as SharePoint Server and describe a remote code execution flaw that could allow an attacker to run arbitrary code on the target syst...

CVE-2024-38023

A remote code execution (RCE) vulnerability exists in Microsoft SharePoint Server due to deficiencies in the deserialization mechanism . An attacker can exploit this flaw by loading a specially crafted file remotely to execute arbitrary code on the system. This vulnerability has been observed in ...

CVE-2013-3848

CVE-2013-3848 affects Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer, allowing remote code execution or memory corruption via a crafted Off...

CVE-2007-2581

CVE-2007-2581 affects Microsoft Windows SharePoint Services 3.0 (Windows Server 2003) and Office SharePoint Server 2007. The vulnerability is a cross-site scripting (XSS) flaw caused by lack of input validation when processing URL requests (PATH_INFO) in SharePoint pages (notably default.aspx). S...

CVE-2013-0081

CVE-2013-0081 affects Microsoft SharePoint components (SharePoint Portal Server 2003 SP3; SharePoint Server 2007 SP3; 2010 SP1/SP2; 2013) and causes a denial of service by abusing unassigned workflows via a crafted URL, triggering W3WP process hang. The issue is listed among MS13-067 vulnerabilit...

CVE-2017-8509

CVE-2017-8509 is an Office remote code execution vulnerability that arises when Office components mishandle objects in memory, allowing an attacker to take control of an affected system if a user opens a crafted Office file. Public details in connected documents indicate the vulnerability affects...

CVE-2020-17115

CVE-2020-17115 is described across connected sources as a session spoofing vulnerability in Microsoft SharePoint Server. The provided Nessus plugin entries group this CVE with other SharePoint CVEs and indicate vulnerable state when updates are missing (e.g., December 2020 security updates). Conc...

CVE-2024-30043

CVE-2024-30043 affects Microsoft SharePoint Server (on-premises) and is caused by improper restriction of XML External Entity (XXE) references, enabling information disclosure. Public details include an XXE exploit example for SharePoint Server 2019 and related advisories. Affected product/versio...

CVE-2021-31173

CVE-2021-31173 is a Microsoft SharePoint Server Information Disclosure vulnerability. Public sources (NVD) assign a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction) with a high potential impact to confidentiality and no impact to integrity...

CVE-2026-45458

Microsoft Office (including Outlook and Word) is affected by CVE-2026-45458 due to a type-confusion in resource access, enabling local code execution. The vulnerability arises when an incompatible type is accessed, with a local attack vector, no user interaction, and no privileges required. The C...

CVE-2020-1583

CVE-2020-1583 is a Microsoft Word information-disclosure vulnerability. An attacker could craft a document to cause Word to inappropriately disclose memory contents, enabling data compromise if the memory location of created objects is known. The vulnerability is triggered by memory handling of W...

CVE-2021-1707

CVE-2021-1707 is a remote code execution vulnerability in Microsoft SharePoint Server. The linked EUVD/Nessus entries and CNVD page confirm it affects SharePoint Server variants and stems from insufficient input validation, enabling code execution by a remote attacker over the network with no use...

CVE-2013-0006

CVE-2013-0006 is associated with OSIsoft PI Interface for OPC XML-DA (ICS advisory ICSA-20-315-01) and Microsoft MSXML/MS13-002 context. Connected documents identify the affected product as PI Interface for OPC XML-DA versions prior to 1.7.3.x, where the vulnerability stems from numeric errors/st...

CVE-2013-0084

CVE-2013-0084 affects Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1. The vulnerability arises from insufficient sanitization of user-supplied URLs, enabling a directory traversal that can bypass content-read restrictions and, per multiple advisories, may allow an attacke...

CVE-2021-28478

Technical details about CVE-2021-28478 are not provided in the connected documents. They only reference a SharePoint spoofing vulnerability without specific affected versions, vectors, or remediation. Monitor official disclosures and patches for updates.

CVE-2023-33129

Technical details about CVE-2023-33129 are not provided in the supplied documents. No specific affected product/version/exploit data is disclosed here. Monitor for updates from official advisories.

CVE-2021-34517

CVE-2021-34517 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources indicate this CVE is addressed by Security Update KB5001975 for SharePoint Server 2019 (16.0.10376.20001). The KB entry associates the CVE with SharePoint Server spoofing remediation and notes that the updat...

CVE-2023-33157

CVE-2023-33157 is a Microsoft SharePoint RCE affecting on‑premises SharePoint Server / SharePoint Server Subscription Edition. Public documentation associates this CVE with a remote code execution vulnerability in SharePoint that is addressed by July 2023 security updates (KB5002423/KB5002424; bu...

CVE-2022-41060

CVE-2022-41060 is a Microsoft Word information disclosure vulnerability. The connected documents reference Word/Office components affected by the November 2022 updates and Office Web Apps Server updates (e.g., KB5002261, KB5002276) addressing Word information disclosure and related vulnerabilitie...

CVE-2022-44690

CVE-2022-44690 is a Microsoft SharePoint Server Remote Code Execution vulnerability. Public sources classify it as a network-exploitable flaw with high impact (CB> Confidentiality, Integrity, Availability all High) per CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Connected documents confirm...

CVE-2025-29793

CVE-2025-29793 affects Microsoft SharePoint (Office SharePoint) and is a remote code execution vulnerability caused by deserialization of untrusted data. An authenticated attacker could execute code over the network on affected SharePoint deployments. The CVSSv3.1 vector is CVSS:3.1/AV:N/AC:L/PR:...

CVE-2026-69465

Microsoft Office SharePoint is affected by a missing authorization flaw that allows an authorized attacker to execute code over a network (remote code execution). The Microsoft CNA rates the severity as CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitatio...

CVE-2013-0080

CVE-2013-0080 affects Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1. A crafted URL vulnerability (Callback Function Vulnerability) lets remote attackers bypass read restrictions and hijack user accounts by enticing a target user to visit a malicious page. The issue arise...

CVE-2022-41122

CVE-2022-41122 is described in connected CNVD/NVD sources as a Microsoft SharePoint Server spoofing vulnerability. The CNVD entry notes that an attacker could exploit a specially crafted website to spoof content, tricking users into believing the site is legitimate. The available documents do not...

CVE-2019-1205

A remote code execution vulnerability exists in Microsoft Word due to improper handling of objects in memory. An attacker can exploit this by tricking a user into opening a specially crafted file , allowing the attacker to perform actions in the security context of the current user. Potential att...

CVE-2021-1641

CVE-2021-1641 is a session spoofing vulnerability affecting Microsoft SharePoint Server. The connected sources confirm affected products span SharePoint Server 2010 through 2019, with multiple related CVEs (e.g., CVE-2021-1707, CVE-2021-1712, CVE-2021-1715/1716/1717/1719) that were addressed in J...

CVE-2023-33130

Technical details about CVE-2023-33130 (affected product/version, root cause, impact or fixes) are not provided in the connected documents. Monitor for updates from official advisories and sources.

CVE-2013-3895

CVE-2013-3895 affects Microsoft SharePoint Server 2007 SP3 and SharePoint 2010 SP1/SP2. Described as a parameter-injection vulnerability that enables remote attackers to perform clickjacking via a crafted web page. Connected sources reference MS13-084 as the security update addressing these issue...

CVE-2019-1295

CVE-2019-1295 is a remote code execution vulnerability in Microsoft SharePoint where APIs aren’t properly protected from unsafe input. The connected Nessus plugins describe multiple vulnerabilities affecting Microsoft SharePoint Server (e.g., 2019 and 2016 builds) including this CVE, with the iss...

CVE-2020-1023

CVE-2020-1023 is a remote code execution vulnerability in Microsoft SharePoint described in the connected Nessus entries as affecting SharePoint Server versions that rely on self-reported version numbers: SharePoint Server 2013 < 15.0.5241.1000, SharePoint Server 2016 < 16.0.5005.1000, and ...

CVE-2021-28450

CVE-2021-28450 is a Microsoft SharePoint Denial of Service vulnerability affecting SharePoint Server 2010–2019 (and related versions) with CVE-2021-28453 referenced as a Word RCE vulnerability. Connected advisories/scans indicate multiple vulnerabilities in SharePoint Server lines and map to Micr...

CVE-2013-0086

Microsoft OneNote 2010 SP1 is affected by CVE-2013-0086 due to a buffer size validation flaw during memory allocation while parsing OneNote files. The root cause is improper buffer size handling, which can lead to information disclosure when a crafted OneNote file is opened. Affected product: One...

CVE-2017-0254

CVE-2017-0254 concerns a remote code execution in Microsoft Office applications (Word, PowerPoint, etc.) and related components when the software fails to properly handle objects in memory. The vulnerability affects multiple Office products across Windows and macOS (e.g., Word 2007, Office 2010 S...

CVE-2020-0973

Technical details for CVE-2020-0973 are not publicly available in the provided documents. No specific affected product/version or remediation is listed here. Monitor for updates.

CVE-2020-16941

CVE-2020-16941 describes an information-disclosure vulnerability in Microsoft SharePoint Server where, on certain pages, the server improperly discloses the folder structure by revealing the folder path of scripts loaded on the page. An attacker must have access to the affected SharePoint page to...

CVE-2020-0852

CVE-2020-0852 is a Microsoft Word Remote Code Execution vulnerability. The issue arises when Word fails to properly handle objects in memory, allowing a specially crafted file to execute code in the caller’s security context. The exploitation vector involves a user opening a malicious file; no ne...

CVE-2020-17089

CVE-2020-17089 is a Microsoft SharePoint elevation-of-privilege vulnerability reported across multiple advisories. Connected sources confirm the issue affects SharePoint Server instances and is associated with related CVEs (e.g., CVE-2020-17115, CVE-2020-17118, CVE-2020-17120, CVE-2020-17121, CVE...