CVE-2012-0145

CVE-2012-0145 is an XSS vulnerability in wizardlist.aspx affecting Microsoft SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary script/HTML via JavaScript sequences in a URL, per the description of the vulnerability. Publ...

CVE-2020-16941

CVE-2020-16941 describes an information-disclosure vulnerability in Microsoft SharePoint Server where, on certain pages, the server improperly discloses the folder structure by revealing the folder path of scripts loaded on the page. An attacker must have access to the affected SharePoint page to...

CVE-2024-32987

CVE-2024-32987 is a Microsoft SharePoint Server information disclosure vulnerability affecting SharePoint Server on-premises. The connected sources describe an issue where an attacker could obtain sensitive information from SharePoint Server. Impact is limited to information disclosure (no code e...

CVE-2026-65665

CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...

CVE-2019-1035

Microsoft Word remote code execution (CVE-2019-1035) arises from improper handling of in-memory objects, enabling a specially crafted Word file to execute actions in the caller’s security context. Exploitation requires the user to open the crafted file, with delivery vectors including email attac...

CVE-2021-42309

CVE-2021-42309 is a remote code execution vulnerability in Microsoft SharePoint Server identified across multiple SharePoint versions (2013/2016/2019 and Subscription Edition). Public sources in the connected documents describe an RCE vector that allows an attacker to bypass authentication or exe...

CVE-2023-33157

CVE-2023-33157 is a Microsoft SharePoint RCE affecting on‑premises SharePoint Server / SharePoint Server Subscription Edition. Public documentation associates this CVE with a remote code execution vulnerability in SharePoint that is addressed by July 2023 security updates (KB5002423/KB5002424; bu...

CVE-2024-49062

CVE-2024-49062 is a Microsoft SharePoint Information Disclosure vulnerability affecting SharePoint components used in on-premises deployments. The issue is described in the initial entry with a CVSS v3.1 base score of 6.5 (NETWORK, Privileges Required: LOW, User Interaction: NONE) and indicates d...

CVE-2013-0083

CVE-2013-0083 affects Microsoft SharePoint Server 2010 SP1 (and SharePoint Foundation 2010) via a cross-site scripting (XSS) vulnerability in crafted site content that allows an attacker to inject arbitrary script/HTML. This could lead to execution of administrative commands in the context of the...

CVE-2018-8284

CVE-2018-8284 is a remote code execution vulnerability in the Microsoft .NET Framework caused by improper input validation. The NVD entry lists affected runtimes across multiple versions (e.g., .NET Framework 2.0/3.0/3.5/3.5.1 and 4.x releases up to 4.7.2, including 4.6.x and 4.7.x). Microsoft MS...

CVE-2019-0957

CVE-2019-0957 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. The issue allows network-remote attack with low complexity to gain high-privilege access; CVSS v3 base score 8.8 (C:H/I:H/A:H) per NVD data. T...

CVE-2020-0971

SharePoint Remote Code Execution (CVE-2020-0971) is described as a vulnerability in Microsoft SharePoint where the software fails to validate the source markup of an application package, enabling remote code execution. Connected Nessus entries reference SharePoint Server versions (e.g., 2013, 201...

CVE-2020-1503

CVE-2020-1503 is an information-disclosure vulnerability in Microsoft Word where memory contents can be disclosed through a crafted Word document. The root cause is improper handling of in‑memory objects, enabling disclosure of memory contents when a user opens a malicious document. Exploitation ...

CVE-2020-16948

CVE-2020-16948 : A information-disclosure vulnerability in Microsoft SharePoint Server arises when the server fails to properly handle objects in memory, allowing an attacker who can log on and run a crafted application to obtain information that could help further compromise the system. The issu...

CVE-2023-33142

Technical details are not publicly provided in the supplied documents. No affected product/version, impact, or remediation details are available here. Monitor for updates from official advisories.

CVE-2026-70306

Summary: CVE-2026-70306 affects Microsoft Office SharePoint. The vulnerability is an improper neutralization of input during web page generation (XSS) that could allow an unauthorized attacker to perform spoofing over a network. Impact: High confidentiality and integrity impact, no availability i...

CVE-2020-1439

CVE-2020-1439 is a remote code execution vulnerability in Microsoft SharePoint’s PerformancePoint Services. The root cause, as stated in multiple sources, is that the service fails to validate the source markup of input XML, allowing an attacker to craft input that leads to code execution within ...

CVE-2023-33132

Technical details for CVE-2023-33132 are not publicly provided in the supplied documents. Monitor updates from Microsoft and authorities for affected products, remediation steps, and confirmed exploit status.

CVE-2021-1726

CVE-2021-1726 is a SharePoint Server spoofing vulnerability observed in multiple versions (2013/2016/2019). Exploitation involves spoofed content convincing users of a trusted site. Microsoft released updates (e.g., MS21-4493194/4493195 and related MSKBs) addressing this CVE; affected deployments...

CVE-2021-31965

Technical details (affected product/component/version/root cause/impact/fix) for CVE-2021-31965 are not provided in the connected documents. Monitor for updates and refer to official advisories (MSRC) for precise guidance.

CVE-2025-21348

CVE-2025-21348 is a Microsoft SharePoint Server remote code execution vulnerability. The CVSSv3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) indicates network access with low attack complexity, requiring high privileges and no user interaction. The impact is high on confidentiality, integrity, ...

CVE-2025-29794

CVE-2025-29794 is a Microsoft SharePoint Remote Code Execution vulnerability described as due to improper authorization in SharePoint, allowing an authenticated attacker to execute code over the network. The incident is documented across multiple sources confirming impact on SharePoint products a...

CVE-2020-0920

CVE-2020-0920 is a remote code execution vulnerability in Microsoft SharePoint where the system fails to check the source markup of an application package. Affected product: SharePoint Server. Impact: RCE with potential execution in the context of SharePoint. The connected analysis notes that thr...

CVE-2020-0923

Technical details for CVE-2020-0923 are not publicly provided in the supplied documents; no product/version/exploit data is available. Monitor for updates.

CVE-2020-1218

CVE-2020-1218 – Microsoft Word Remote Code Execution : A vulnerability in Word where memory handling of in-file objects can be corrupted by a specially crafted file. An attacker could exploit this via email or a compromised website by convincing a user to open the crafted Word document, executing...

CVE-2020-1501

CVE-2020-1501 is a Microsoft SharePoint Server spoofing vulnerability where a specially crafted web request is not properly sanitized, enabling an authenticated attacker to perform cross‑site scripting and execute actions in the user’s security context. The impact described in the sources include...

CVE-2020-16946

The CVE-2020-16946 entry refers to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where crafted web requests are not properly sanitized. The authenticated attacker could execute scripts in the user’s browser context, potentially reading restricted content and performing...

CVE-2013-3180

CVE-2013-3180 is a cross-site scripting vulnerability in Microsoft SharePoint Server 2010 SP1/SP2 and SharePoint Server 2013. It allows remote attackers to inject arbitrary web script or HTML via a crafted POST request (POST XSS). The issue is documented under MS13-067; affected products include ...

CVE-2020-0892

CVE-2020-0892 is a Microsoft Word remote code execution vulnerability. The linked documents confirm Word is vulnerable when it fails to properly handle objects in memory, allowing a crafted file to run code in the current user’s context. The issue is tied to multiple Word-related CVEs and is disc...

CVE-2020-1107

Technical details about CVE-2020-1107 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources for affected products, impact, and fixes.

CVE-2021-1716

CVE-2021-1716 is a Microsoft Word Remote Code Execution vulnerability. The initial entry confirms a Word-related RCE with CVSS v3.1 base score 7.8 (HIGH) and local attack vector, with user interaction required. Connected sources (Nessus/Office/SharePoint plugin data) reference CVE-2021-1716 as pa...

CVE-2021-24066

CVE-2021-24066 is a Microsoft SharePoint remote code execution vulnerability. Connected sources confirm it affects SharePoint Server (2013/2016/2019) and is addressed by February 2021 security updates (MS21-4493xx). The CVE is listed among multiple vulnerabilities; explicit exploitation details a...

CVE-2022-30171

Technical details about CVE-2022-30171 (affected product/version, root cause, impact, or fixes) are not provided in the connected documents. Monitor for updates.

CVE-2022-41103

CVE-2022-41103 is Microsoft Word Information Disclosure Vulnerability. Connected sources indicate it is referenced alongside Word/Office and SharePoint update bundles (e.g., Word C2R and SharePoint November 2022 patches). The vulnerability is described as information disclosure; no explicit root-...

CVE-2012-0144

CVE-2012-0144 is an XSS vulnerability in themeweb.aspx affecting Microsoft SharePoint products: SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL. OpenVAS/Nessus entri...

CVE-2018-0789

CVE-2018-0789 affects Microsoft SharePoint Foundation 2010, and SharePoint Server 2013/2016. It is an elevation-of-privilege vulnerability caused by how web requests are handled, enabling an attacker to escalate privileges via network access with low complexity and no user interaction. The connec...

CVE-2018-0792

CVE-2018-0792 is a remote-code-execution vulnerability in Word 2016/Microsoft Office 2016, caused by unsafe handling of in-memory objects. Affected software includes Word 2016 (Office 2016). The vulnerability could allow an attacker to execute arbitrary code on a vulnerable host when a specially ...

CVE-2020-0954

Technical details for CVE-2020-0954 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2026-45458

Microsoft Office (including Outlook and Word) is affected by CVE-2026-45458 due to a type-confusion in resource access, enabling local code execution. The vulnerability arises when an incompatible type is accessed, with a local attack vector, no user interaction, and no privileges required. The C...

CVE-2016-0140

Summary: CVE-2016-0140 is a remote code execution memory corruption flaw in Microsoft Office components including Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2. The issue arises from improper handling of objects in memory, a...

CVE-2019-1260

CVE-2019-1260 is an elevation-of-privilege vulnerability in Microsoft SharePoint. The vulnerability is described as allowing an attacker to impersonate a user or gain higher privileges via vulnerable SharePoint components. Public references in connected documents indicate affected SharePoint Serv...

CVE-2022-41038

CVE-2022-41038 affects Microsoft SharePoint Server and is described as a remote code execution vulnerability. Public documents in the Connected set confirm SharePoint as the affected product and that remediation is delivered via Microsoft security updates (e.g., KB5002287 for SharePoint Server 20...

CVE-2023-33160

CVE-2023-33160 affects Microsoft SharePoint Server (on‑premises) with a remote code execution vulnerability. The entry shows a high severity (CVSS v3.1: 8.8) and public patches exist: KB5002425 (SharePoint Server 2016) and KB5002423 (SharePoint Server 2019), released 2023‑07‑11. Affected products...

CVE-2020-0930

Technical details (affected products, versions, vulnerability root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2025-21344

CVE-2025-21344 is a Microsoft SharePoint Server remote code execution vulnerability affecting on-premises SharePoint Server products. Connected sources confirm the issue as a remote code execution flaw impacting SharePoint Server installations (2016, Subscription Edition, 2019) and indicate Micro...

CVE-2023-36891

Technical details (affected product/version, root cause, impact, exploitation) for CVE-2023-36891 are not provided in the connected documents. The corpus only notes a SharePoint spoofing vulnerability without concrete specifics.

CVE-2024-30100

CVE-2024-30100 is a Microsoft SharePoint Server remote code execution vulnerability. The Connected documents confirm a SharePoint Server remote code execution issue with official patches released (KB5002602 for SharePoint Server 2019, KB5002603 for SharePoint Server Subscription Edition, KB500260...

CVE-2019-1261

Microsoft SharePoint vulnerable to a spoofing/CSRF issue in which improper handling of requests to authorize applications can allow an attacker to perform cross-site requests. CVE-2019-1261 is the associated entry, distinct from CVE-2019-1259. Connected documents also reference related SharePoint...

CVE-2022-21987

CVE-2022-21987 is a Spoofing vulnerability in Microsoft SharePoint Server affecting multiple editions (2013/2016/2019 Subscription Edition). The connected documents confirm the issue allows spoofing content presented to users, potentially deceiving them into believing a site is legitimate. Micros...

CVE-2023-36894

CVE-2023-36894 is a SharePoint Server information‑disclosure vulnerability affecting on‑premises SharePoint Server installations (2016, 2019, and Subscription Edition). The issue, described in multiple sources, enables an information disclosure that could expose sensitive data. The connected docu...