CVE-2020-17089

CVE-2020-17089 is a Microsoft SharePoint elevation-of-privilege vulnerability reported across multiple advisories. Connected sources confirm the issue affects SharePoint Server instances and is associated with related CVEs (e.g., CVE-2020-17115, CVE-2020-17118, CVE-2020-17120, CVE-2020-17121, CVE...

CVE-2020-17120

The CVE-2020-17120 entry corresponds to a Microsoft SharePoint Information Disclosure Vulnerability. Connected sources confirm it is part of multiple SharePoint Server vulnerabilities across several versions (2010, 2013, 2016, 2019) and is listed among updates released in December 2020. The vulne...

CVE-2023-33157

CVE-2023-33157 is a Microsoft SharePoint RCE affecting on‑premises SharePoint Server / SharePoint Server Subscription Edition. Public documentation associates this CVE with a remote code execution vulnerability in SharePoint that is addressed by July 2023 security updates (KB5002423/KB5002424; bu...

CVE-2026-45458

Microsoft Office (including Outlook and Word) is affected by CVE-2026-45458 due to a type-confusion in resource access, enabling local code execution. The vulnerability arises when an incompatible type is accessed, with a local attack vector, no user interaction, and no privileges required. The C...

CVE-2020-0930

Technical details (affected products, versions, vulnerability root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2020-16948

CVE-2020-16948 : A information-disclosure vulnerability in Microsoft SharePoint Server arises when the server fails to properly handle objects in memory, allowing an attacker who can log on and run a crafted application to obtain information that could help further compromise the system. The issu...

CVE-2020-1342

CVE-2020-1342 is an information-disclosure vulnerability in Microsoft Office (notably Word/Office components) caused by reading out of bound memory due to an uninitialized variable. The detail explicitly states memory contents could be disclosed when a vulnerable file is opened in affected Office...

CVE-2024-49062

CVE-2024-49062 is a Microsoft SharePoint Information Disclosure vulnerability affecting SharePoint components used in on-premises deployments. The issue is described in the initial entry with a CVSS v3.1 base score of 6.5 (NETWORK, Privileges Required: LOW, User Interaction: NONE) and indicates d...

CVE-2022-30158

CVE-2022-30158 corresponds to a Microsoft SharePoint Server remote code execution vulnerability. According to the connected sources, the vulnerability affects Microsoft SharePoint Server with RCE potential impacting confidentiality, integrity, and availability (all High). The CVSS v3.1 score is 8...

CVE-2022-41103

CVE-2022-41103 is Microsoft Word Information Disclosure Vulnerability. Connected sources indicate it is referenced alongside Word/Office and SharePoint update bundles (e.g., Word C2R and SharePoint November 2022 patches). The vulnerability is described as information disclosure; no explicit root-...

CVE-2018-8284

CVE-2018-8284 is a remote code execution vulnerability in the Microsoft .NET Framework caused by improper input validation. The NVD entry lists affected runtimes across multiple versions (e.g., .NET Framework 2.0/3.0/3.5/3.5.1 and 4.x releases up to 4.7.2, including 4.6.x and 4.7.x). Microsoft MS...

CVE-2022-37961

CVE-2022-37961 is a remote code execution vulnerability in Microsoft SharePoint Server. The Connected KB describes a security update (KB5002271) for SharePoint Server Subscription Edition (16.0.x) released around Sep 13, 2022 that resolves this RCE alongside related SharePoint RCE advisories. Aff...

CVE-2020-1503

CVE-2020-1503 is an information-disclosure vulnerability in Microsoft Word where memory contents can be disclosed through a crafted Word document. The root cause is improper handling of in‑memory objects, enabling disclosure of memory contents when a user opens a malicious document. Exploitation ...

CVE-2020-16953

CVE-2020-16953 is an information-disclosure vulnerability in Microsoft SharePoint Server caused by improper handling of objects in memory. Exploitation requires an attacker to log on to an affected system and run a crafted application, enabling them to obtain sensitive information to further comp...

CVE-2021-42309

CVE-2021-42309 is a remote code execution vulnerability in Microsoft SharePoint Server identified across multiple SharePoint versions (2013/2016/2019 and Subscription Edition). Public sources in the connected documents describe an RCE vector that allows an attacker to bypass authentication or exe...

CVE-2024-32987

CVE-2024-32987 is a Microsoft SharePoint Server information disclosure vulnerability affecting SharePoint Server on-premises. The connected sources describe an issue where an attacker could obtain sensitive information from SharePoint Server. Impact is limited to information disclosure (no code e...

CVE-2025-21348

CVE-2025-21348 is a Microsoft SharePoint Server remote code execution vulnerability. The CVSSv3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) indicates network access with low attack complexity, requiring high privileges and no user interaction. The impact is high on confidentiality, integrity, ...

CVE-2025-29794

CVE-2025-29794 is a Microsoft SharePoint Remote Code Execution vulnerability described as due to improper authorization in SharePoint, allowing an authenticated attacker to execute code over the network. The incident is documented across multiple sources confirming impact on SharePoint products a...

CVE-2012-0145

CVE-2012-0145 is an XSS vulnerability in wizardlist.aspx affecting Microsoft SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary script/HTML via JavaScript sequences in a URL, per the description of the vulnerability. Publ...

CVE-2019-0957

CVE-2019-0957 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. The issue allows network-remote attack with low complexity to gain high-privilege access; CVSS v3 base score 8.8 (C:H/I:H/A:H) per NVD data. T...

CVE-2023-33142

Technical details are not publicly provided in the supplied documents. No affected product/version, impact, or remediation details are available here. Monitor for updates from official advisories.

CVE-2017-8511

Technical details for CVE-2017-8511 (affected Office component, root cause, impact, fix) are not provided in the Connected documents. Monitor for updates; no public technical details available in the supplied sources.

CVE-2020-1107

Technical details about CVE-2020-1107 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources for affected products, impact, and fixes.

CVE-2021-1716

CVE-2021-1716 is a Microsoft Word Remote Code Execution vulnerability. The initial entry confirms a Word-related RCE with CVSS v3.1 base score 7.8 (HIGH) and local attack vector, with user interaction required. Connected sources (Nessus/Office/SharePoint plugin data) reference CVE-2021-1716 as pa...

CVE-2023-33132

Technical details for CVE-2023-33132 are not publicly provided in the supplied documents. Monitor updates from Microsoft and authorities for affected products, remediation steps, and confirmed exploit status.

CVE-2019-1035

Microsoft Word remote code execution (CVE-2019-1035) arises from improper handling of in-memory objects, enabling a specially crafted Word file to execute actions in the caller’s security context. Exploitation requires the user to open the crafted file, with delivery vectors including email attac...

CVE-2020-0920

CVE-2020-0920 is a remote code execution vulnerability in Microsoft SharePoint where the system fails to check the source markup of an application package. Affected product: SharePoint Server. Impact: RCE with potential execution in the context of SharePoint. The connected analysis notes that thr...

CVE-2020-0971

SharePoint Remote Code Execution (CVE-2020-0971) is described as a vulnerability in Microsoft SharePoint where the software fails to validate the source markup of an application package, enabling remote code execution. Connected Nessus entries reference SharePoint Server versions (e.g., 2013, 201...

CVE-2020-1439

CVE-2020-1439 is a remote code execution vulnerability in Microsoft SharePoint’s PerformancePoint Services. The root cause, as stated in multiple sources, is that the service fails to validate the source markup of input XML, allowing an attacker to craft input that leads to code execution within ...

CVE-2022-30171

Technical details about CVE-2022-30171 (affected product/version, root cause, impact, or fixes) are not provided in the connected documents. Monitor for updates.

CVE-2013-3180

CVE-2013-3180 is a cross-site scripting vulnerability in Microsoft SharePoint Server 2010 SP1/SP2 and SharePoint Server 2013. It allows remote attackers to inject arbitrary web script or HTML via a crafted POST request (POST XSS). The issue is documented under MS13-067; affected products include ...

CVE-2020-1218

CVE-2020-1218 – Microsoft Word Remote Code Execution : A vulnerability in Word where memory handling of in-file objects can be corrupted by a specially crafted file. An attacker could exploit this via email or a compromised website by convincing a user to open the crafted Word document, executing...

CVE-2020-1460

CVE-2020-1460 is a Microsoft SharePoint Server Remote Code Execution vulnerability. The issue occurs when SharePoint Server fails to properly identify and filter unsafe ASP.Net web controls; an authenticated attacker can craft and invoke a malicious page to execute actions in the SharePoint appli...

CVE-2021-31965

Technical details (affected product/component/version/root cause/impact/fix) for CVE-2021-31965 are not provided in the connected documents. Monitor for updates and refer to official advisories (MSRC) for precise guidance.

CVE-2018-0792

CVE-2018-0792 is a remote-code-execution vulnerability in Word 2016/Microsoft Office 2016, caused by unsafe handling of in-memory objects. Affected software includes Word 2016 (Office 2016). The vulnerability could allow an attacker to execute arbitrary code on a vulnerable host when a specially ...

CVE-2020-0892

CVE-2020-0892 is a Microsoft Word remote code execution vulnerability. The linked documents confirm Word is vulnerable when it fails to properly handle objects in memory, allowing a crafted file to run code in the current user’s context. The issue is tied to multiple Word-related CVEs and is disc...

CVE-2020-1501

CVE-2020-1501 is a Microsoft SharePoint Server spoofing vulnerability where a specially crafted web request is not properly sanitized, enabling an authenticated attacker to perform cross‑site scripting and execute actions in the user’s security context. The impact described in the sources include...

CVE-2020-16946

The CVE-2020-16946 entry refers to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where crafted web requests are not properly sanitized. The authenticated attacker could execute scripts in the user’s browser context, potentially reading restricted content and performing...

CVE-2022-41038

CVE-2022-41038 affects Microsoft SharePoint Server and is described as a remote code execution vulnerability. Public documents in the Connected set confirm SharePoint as the affected product and that remediation is delivered via Microsoft security updates (e.g., KB5002287 for SharePoint Server 20...

CVE-2024-30100

CVE-2024-30100 is a Microsoft SharePoint Server remote code execution vulnerability. The Connected documents confirm a SharePoint Server remote code execution issue with official patches released (KB5002602 for SharePoint Server 2019, KB5002603 for SharePoint Server Subscription Edition, KB500260...

CVE-2012-0144

CVE-2012-0144 is an XSS vulnerability in themeweb.aspx affecting Microsoft SharePoint products: SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL. OpenVAS/Nessus entri...

CVE-2021-1726

CVE-2021-1726 is a SharePoint Server spoofing vulnerability observed in multiple versions (2013/2016/2019). Exploitation involves spoofed content convincing users of a trusted site. Microsoft released updates (e.g., MS21-4493194/4493195 and related MSKBs) addressing this CVE; affected deployments...

CVE-2016-0140

Summary: CVE-2016-0140 is a remote code execution memory corruption flaw in Microsoft Office components including Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2. The issue arises from improper handling of objects in memory, a...

CVE-2018-0789

CVE-2018-0789 affects Microsoft SharePoint Foundation 2010, and SharePoint Server 2013/2016. It is an elevation-of-privilege vulnerability caused by how web requests are handled, enabling an attacker to escalate privileges via network access with low complexity and no user interaction. The connec...

CVE-2019-1260

CVE-2019-1260 is an elevation-of-privilege vulnerability in Microsoft SharePoint. The vulnerability is described as allowing an attacker to impersonate a user or gain higher privileges via vulnerable SharePoint components. Public references in connected documents indicate affected SharePoint Serv...

CVE-2020-0954

Technical details for CVE-2020-0954 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2021-24066

CVE-2021-24066 is a Microsoft SharePoint remote code execution vulnerability. Connected sources confirm it affects SharePoint Server (2013/2016/2019) and is addressed by February 2021 security updates (MS21-4493xx). The CVE is listed among multiple vulnerabilities; explicit exploitation details a...

CVE-2023-33160

CVE-2023-33160 affects Microsoft SharePoint Server (on‑premises) with a remote code execution vulnerability. The entry shows a high severity (CVSS v3.1: 8.8) and public patches exist: KB5002425 (SharePoint Server 2016) and KB5002423 (SharePoint Server 2019), released 2023‑07‑11. Affected products...

CVE-2011-1892

CVE-2011-1892 targets SharePoint-related products (SharePoint Server/Workspace/ Groove components, Office Web Apps, Windows SharePoint Services, etc.). The flaw is an XXE-style vulnerability where Web Parts containing XML classes referencing external entities allow remote authenticated users to r...

CVE-2025-21344

CVE-2025-21344 is a Microsoft SharePoint Server remote code execution vulnerability affecting on-premises SharePoint Server products. Connected sources confirm the issue as a remote code execution flaw impacting SharePoint Server installations (2016, Subscription Edition, 2019) and indicate Micro...