CVE-2016-0183

Summary: CVE-2016-0183 is a remote code execution flaw in the Windows font library used by Microsoft Office components (Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, Office Web Apps 2010 SP2). What’s affected: Windows Font Library within affected Office p...

CVE-2017-8743

CVE-2017-8743 affects Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server. The vulnerability arises from improper handling of objects in memory, enabling remote code execution. The CVSS details in the initial record indicate a HIGH impact with local/re...

CVE-2020-1099

CVE-2020-1099 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. The provided documents identify the vulnerability type and affected product (Microsoft SharePoint Server) but do not specify affect...

CVE-2021-1719

Technical details about CVE-2021-1719 are not publicly provided in the connected documents. The materials reference SharePoint elevation of privilege but do not specify affected versions, root cause, or fixes. Monitor for updates.

CVE-2025-47163

CVE-2025-47163 is a Microsoft SharePoint/SharePoint Server remote code execution vulnerability described as a deserialization of untrusted data that could allow an authorized attacker to execute code over a network. The CVE is documented across multiple sources (Microsoft MSRC advisories and CVE ...

CVE-2025-47168

CVE-2025-47168 (Microsoft Word RCE) is a use-after-free vulnerability in Word that allows an attacker to execute code locally after triggering with a crafted file or object. The issue is in Word component handling, leading to arbitrary code execution with the attacker’s privileges; the CVSS detai...

CVE-2020-1178

Technical details for CVE-2020-1178 are not publicly provided in the supplied documents; no affected versions, root cause, exploitation details, or mitigations are shown. Monitor for official advisories to obtain concrete information.

CVE-2021-40483

Technical details about CVE-2021-40483 are not provided in the connected documents. Public information is limited here; monitor for updates from official advisories and vendor notices.

CVE-2014-0251

CVE-2014-0251 affects Microsoft SharePoint products including Windows SharePoint Services 3.0 SP3, SharePoint Server 2007 SP3, 2010 SP1/SP2, 2013 Gold/SP1, SharePoint Foundation 2010 SP1/SP2/2013 Gold/SP1, Project Server 2010 SP1/SP2/2013 Gold/SP1, Web Applications 2010 SP1/SP2, Office Web Apps S...

CVE-2017-0006

Technical details (affected products, root cause, and remediation) are not provided in the connected documents beyond the initial CVE summary; monitor for updates.

CVE-2019-0831

CVE-2019-0831 is a Microsoft SharePoint Server XSS vulnerability. The connected sources indicate an XSS caused by improper sanitization of specially crafted web requests to an affected SharePoint server. The CVE-2019-0831 entry is distinct from CVE-2019-0830. No explicit exploit details, affected...

CVE-2020-16942

CVE-2020-16942 is an information-disclosure vulnerability in Microsoft SharePoint Server. The issue arises when rendering specific web pages, allowing an attacker with access to the affected page to view the folder path of scripts loaded on that page due to improper disclosure of folder structure...

CVE-2020-16979

CVE-2020-16979 is an Information Disclosure Vulnerability in Microsoft SharePoint. Connected documents confirm the issue affects SharePoint Server installations and is addressed via November 2020 security updates (e.g., MS20-4486x/MS20-4487x). The exact root cause details are not disclosed in the...

CVE-2023-36892

CVE-2023-36892 is a Microsoft SharePoint Server spoofing vulnerability that can also enable information disclosure. Public details in the initial doc show a high-severity impact (CVSS 3.1: AV Network, AC Low, PR Low, UI Required; impacts Confidentiality/Integrity/Availability H). Connected docume...

CVE-2026-69465

Microsoft Office SharePoint is affected by a missing authorization flaw that allows an authorized attacker to execute code over a network (remote code execution). The Microsoft CNA rates the severity as CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitatio...

CVE-2015-0085

CVE-2015-0085 is a use-after-free vulnerability in Microsoft Office components (including Office 2007/2010/2013 suites and related SharePoint/Viewer components) that enables remote code execution via a crafted Office document. The issue affects a broad set of Office applications and SharePoint-re...

CVE-2016-3234

CVE-2016-3234 affects Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint 2010 SP2/2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1. The root cause is an information disclosure flaw that...

CVE-2016-3279

CVE-2016-3279 is a remote code execution vulnerability in multiple Microsoft Office components (e.g., Excel, Word, PowerPoint, Word Automation Services, Office Web Apps) that can be triggered by processing a crafted XLA file. Affected products include Office 2010 SP2, 2013 SP1/RT SP1, 2016, Word ...

CVE-2020-1440

CVE-2020-1440 describes a tampering vulnerability in Microsoft SharePoint Server where an authenticated attacker can modify a targeted user’s profile data by sending a specially crafted request. The root cause is SharePoint’s improper handling of profile data. The impact, as stated, is the abilit...

CVE-2020-1448

CVE-2020-1448 corresponds to a Remote Code Execution vulnerability in Microsoft Word. The issue arises when Word fails to properly handle objects in memory, enabling an attacker to run code in the context of the current user. The connected Nessus entries corroborate that CVE-2020-1448 is grouped ...

CVE-2020-1505

CVE-2020-1505 is an Information Disclosure vulnerability affecting Microsoft SharePoint Server where in-memory objects are mishandled. An attacker must log on to an affected system and run a specially crafted application to obtain information that could help compromise the user’s system. The issu...

CVE-2020-1573

CVE-2020-1573 is a Microsoft SharePoint Server cross-site scripting (XSS) vulnerability. The root cause is improper sanitization of crafted web requests, which an authenticated attacker could exploit to execute scripts in the user’s browser context, potentially reading restricted data, acting on ...

CVE-2020-17060

CVE-2020-17060 is a Microsoft SharePoint spoofing vulnerability affecting multiple SharePoint Server versions (2010, 2013, 2016, 2019). The connected Nessus entries associate this CVE with security updates released in November 2020 to address spoofing alongside other SharePoint vulnerabilities (e...

CVE-2025-49703

CVE-2025-49703 is a Microsoft Word/Office remote code execution vulnerability caused by a use-after-free condition in Word. Affected products include Word/Office; exploitation yields local code execution with High impact per the CVSS (Local access, user interaction required, high confidentiality/...

CVE-2026-33112

Technical details for CVE-2026-33112 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2017-0027

CVE-2017-0027 affects Microsoft Office products including Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1. Description: information disclosure from process memory when processing a crafted Office docume...

CVE-2019-1031

Microsoft SharePoint Server has an XSS vulnerability (CVE-2019-1031) due to improper sanitization of crafted web requests. An authenticated attacker could run scripts in the user’s browser, read restricted content, and perform actions on the SharePoint site (e.g., change permissions, delete conte...

CVE-2020-1456

CVE-2020-1456 is a SharePoint Server cross-site scripting (XSS) vulnerability. The initial doc describes exploitation via an improperly sanitized crafted web request, enabling script execution in the user’s context (XSS). Connected documents (CNVD entries) corroborate a SharePoint Server XSS weak...

CVE-2014-4117

CVE-2014-4117 affects Microsoft Office and related components (Word 2007/2010, Office 2010, Office for Mac 2011, Word Web Apps, SharePoint) where remote code execution is possible via crafted Word document properties. Root cause: improper handling/parsing of Word file format elements allows arbit...

CVE-2016-0127

CVE-2016-0127 affects Microsoft Office components: Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2/2013 SP1, and Office Web Apps 2010 SP2/Server 2013 SP1. Description...

CVE-2016-0134

CVE-2016-0134 affects multiple Microsoft Office products, including Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1/RT SP1, Word 2016, Word for Mac 2011/2016, Office Compatibility Pack SP3, and related SharePoint/Web Apps components. The vulnerability is described as a memory corrupt...

CVE-2017-0030

Technical details about CVE-2017-0030 are not publicly available in the provided connected documents; no specific affected products, exploit info, or remediation are included. Monitor for updates.

CVE-2019-1257

CVE-2019-1257 is a Microsoft SharePoint Remote Code Execution vulnerability where APIs fail to check the source markup of an uploaded application package. The issue is documented across multiple sources as affecting SharePoint Server (version lines cited by Nessus plugins), with the root cause be...

CVE-2020-1205

CVE-2020-1205 affects Microsoft SharePoint Server. The vulnerability arises from improper sanitization of crafted web requests, enabling an authenticated attacker who can reach an affected SharePoint server to perform cross-site scripting and execute scripts in the user’s security context. This c...

CVE-2020-1323

CVE-2020-1323 is a Microsoft SharePoint open redirect vulnerability. The available documents confirm an open redirect that could lead to spoofing via a crafted URL. No concrete affected versions or patch details are provided in the supplied sources; refer to the linked advisory for remediation gu...

CVE-2017-0052

The CVE affects Microsoft Office components: Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3. It is a memory corruption vulnerability exploitable via a crafted document, potentially allowing remote code execution or denial of service. ...

CVE-2018-8627

CVE-2018-8627 (Microsoft Excel information disclosure) : An information-disclosure flaw in Excel when reading memory out of bounds due to an uninitialized variable. Affected products include Microsoft Office/Excel and related viewers. Exploitation requires opening a specially crafted file; succes...

CVE-2019-1442

CVE-2019-1442 : The connected sources confirm a vulnerability in Microsoft SharePoint Server 2019 (64‑bit) where a security feature bypass occurs when URLs are not validated, enabling information disclosure/credential exposure when an attacker delivers a specially crafted file. The entry is tied ...

CVE-2020-1100

CVE-2020-1100 is an XSS vulnerability in Microsoft SharePoint Server where improper sanitization of a specially crafted web request can lead to compromised data in affected SharePoint deployments. The vulnerability affects SharePoint Server components handling input to web requests; CVSS v3.1 vec...

CVE-2021-43242

CVE-2021-43242 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources indicate the issue affects multiple SharePoint Server editions (2013/2016/2019 and SharePoint Server Subscription Edition) and is described as a session spoofing flaw that can allow an attacker to perform ac...

CVE-2022-30159

CVE-2022-30159 is identified as a Microsoft Office information disclosure vulnerability referenced by security updates KB5002062/KB5002222/KB5002224. The connected documents indicate affected ecosystems include SharePoint Server and Microsoft Office components, with remediation via the listed sec...

CVE-2024-49070

CVE-2024-49070 is a Microsoft SharePoint remote code execution vulnerability. Public sources identify it as an RCE affecting SharePoint components and linked Office/SharePoint CVEs with a base score around 7.4 (HIGH) via CVSS 3.1, local exploit vector with no user interaction required according t...

CVE-2019-1036

CVE-2019-1036 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where an attacker with authentication can exploit insufficient sanitization of crafted web requests. Successful exploitation could allow the attacker to execute scripts in the user’s browser, read co...

CVE-2020-0893

CVE-2020-0893 is a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. Affected software is SharePoint Server (no explicit version range provided in the documents). The issue is documented in the NVD entry and...

CVE-2020-0978

Technical details for CVE-2020-0978 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for official updates.

CVE-2020-1200

CVE-2020-1200 is a Microsoft SharePoint remote code execution vulnerability. It arises when SharePoint fails to properly check the source markup of an uploaded application package, allowing an attacker to execute arbitrary code within the SharePoint application pool context after a user uploads a...

CVE-2020-1297

Technical details for CVE-2020-1297 are not publicly available in the provided connected documents. Monitor for updates and new disclosures that specify affected products, versions, impact, and remediation.

CVE-2020-17015

CVE-2020-17015 is a Microsoft SharePoint Server Spoofing Vulnerability. The connected sources confirm this vulnerability affects SharePoint Server in on‑premises deployments and indicate the root issue is spoofing (authentication-related) with an impact on integrity (I) and network access as the ...

CVE-2021-1712

CVE-2021-1712 is described in the provided documents as a Microsoft SharePoint elevation-of-privilege vulnerability. The NVD entry provides a CVSS v3.1 base score of 8.0 (NETWORK, LOW attack complexity, Privileges Required: LOW, User Interaction: REQUIRED, with HIGH confidentiality/integrity/avai...

CVE-2021-42294

CVE-2021-42294 is a Microsoft SharePoint Server remote code execution vulnerability. Affected products include SharePoint Server 2013/2016/2019 (including Subscription Edition). Public remediation exists via December 2021 security updates (e.g., KB5002054 for SharePoint Server 2019; associated MS...