CVE-2020-1099

CVE-2020-1099 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. The provided documents identify the vulnerability type and affected product (Microsoft SharePoint Server) but do not specify affect...

CVE-2020-1505

CVE-2020-1505 is an Information Disclosure vulnerability affecting Microsoft SharePoint Server where in-memory objects are mishandled. An attacker must log on to an affected system and run a specially crafted application to obtain information that could help compromise the user’s system. The issu...

CVE-2020-16979

CVE-2020-16979 is an Information Disclosure Vulnerability in Microsoft SharePoint. Connected documents confirm the issue affects SharePoint Server installations and is addressed via November 2020 security updates (e.g., MS20-4486x/MS20-4487x). The exact root cause details are not disclosed in the...

CVE-2021-40483

Technical details about CVE-2021-40483 are not provided in the connected documents. Public information is limited here; monitor for updates from official advisories and vendor notices.

CVE-2017-0006

Technical details (affected products, root cause, and remediation) are not provided in the connected documents beyond the initial CVE summary; monitor for updates.

CVE-2020-16942

CVE-2020-16942 is an information-disclosure vulnerability in Microsoft SharePoint Server. The issue arises when rendering specific web pages, allowing an attacker with access to the affected page to view the folder path of scripts loaded on that page due to improper disclosure of folder structure...

CVE-2021-1719

Technical details about CVE-2021-1719 are not publicly provided in the connected documents. The materials reference SharePoint elevation of privilege but do not specify affected versions, root cause, or fixes. Monitor for updates.

CVE-2026-21260

CVE-2026-21260 affects Microsoft Office Outlook, where exposure of sensitive information to an unauthorized actor enables network-based spoofing. The entry cites a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK and no privileges required, but has no exploitation details in the...

CVE-2016-3279

CVE-2016-3279 is a remote code execution vulnerability in multiple Microsoft Office components (e.g., Excel, Word, PowerPoint, Word Automation Services, Office Web Apps) that can be triggered by processing a crafted XLA file. Affected products include Office 2010 SP2, 2013 SP1/RT SP1, 2016, Word ...

CVE-2019-0831

CVE-2019-0831 is a Microsoft SharePoint Server XSS vulnerability. The connected sources indicate an XSS caused by improper sanitization of specially crafted web requests to an affected SharePoint server. The CVE-2019-0831 entry is distinct from CVE-2019-0830. No explicit exploit details, affected...

CVE-2026-40365

CVE-2026-40365 : Microsoft SharePoint Server remote code execution due to insufficient granularity of access control. An authorized attacker can execute code over a network (CVSS v3.1: 8.8, HIGH; AV:N/AC:L/PR:L/UI:N/S:U). Public docs confirm the issue and that Microsoft released security updates ...

CVE-2026-44819

CVE-2026-44819 affects Microsoft Office and is described as a heap-based buffer overflow that allows a local attacker to execute code. The vulnerability is characterized by a LOCAL attack vector, LOW attack complexity, and requires user interaction, with a high impact on confidentiality, integrit...

CVE-2016-3234

CVE-2016-3234 affects Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint 2010 SP2/2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1. The root cause is an information disclosure flaw that...

CVE-2019-1031

Microsoft SharePoint Server has an XSS vulnerability (CVE-2019-1031) due to improper sanitization of crafted web requests. An authenticated attacker could run scripts in the user’s browser, read restricted content, and perform actions on the SharePoint site (e.g., change permissions, delete conte...

CVE-2020-1440

CVE-2020-1440 describes a tampering vulnerability in Microsoft SharePoint Server where an authenticated attacker can modify a targeted user’s profile data by sending a specially crafted request. The root cause is SharePoint’s improper handling of profile data. The impact, as stated, is the abilit...

CVE-2020-17060

CVE-2020-17060 is a Microsoft SharePoint spoofing vulnerability affecting multiple SharePoint Server versions (2010, 2013, 2016, 2019). The connected Nessus entries associate this CVE with security updates released in November 2020 to address spoofing alongside other SharePoint vulnerabilities (e...

CVE-2023-36892

CVE-2023-36892 is a Microsoft SharePoint Server spoofing vulnerability that can also enable information disclosure. Public details in the initial doc show a high-severity impact (CVSS 3.1: AV Network, AC Low, PR Low, UI Required; impacts Confidentiality/Integrity/Availability H). Connected docume...

CVE-2025-47168

CVE-2025-47168 (Microsoft Word RCE) is a use-after-free vulnerability in Word that allows an attacker to execute code locally after triggering with a crafted file or object. The issue is in Word component handling, leading to arbitrary code execution with the attacker’s privileges; the CVSS detai...

CVE-2026-33112

Technical details for CVE-2026-33112 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2017-0052

The CVE affects Microsoft Office components: Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3. It is a memory corruption vulnerability exploitable via a crafted document, potentially allowing remote code execution or denial of service. ...

CVE-2019-1257

CVE-2019-1257 is a Microsoft SharePoint Remote Code Execution vulnerability where APIs fail to check the source markup of an uploaded application package. The issue is documented across multiple sources as affecting SharePoint Server (version lines cited by Nessus plugins), with the root cause be...

CVE-2020-1323

CVE-2020-1323 is a Microsoft SharePoint open redirect vulnerability. The available documents confirm an open redirect that could lead to spoofing via a crafted URL. No concrete affected versions or patch details are provided in the supplied sources; refer to the linked advisory for remediation gu...

CVE-2020-1456

CVE-2020-1456 is a SharePoint Server cross-site scripting (XSS) vulnerability. The initial doc describes exploitation via an improperly sanitized crafted web request, enabling script execution in the user’s context (XSS). Connected documents (CNVD entries) corroborate a SharePoint Server XSS weak...

CVE-2020-1573

CVE-2020-1573 is a Microsoft SharePoint Server cross-site scripting (XSS) vulnerability. The root cause is improper sanitization of crafted web requests, which an authenticated attacker could exploit to execute scripts in the user’s browser context, potentially reading restricted data, acting on ...

CVE-2025-49703

CVE-2025-49703 is a Microsoft Word/Office remote code execution vulnerability caused by a use-after-free condition in Word. Affected products include Word/Office; exploitation yields local code execution with High impact per the CVSS (Local access, user interaction required, high confidentiality/...

CVE-2014-4117

CVE-2014-4117 affects Microsoft Office and related components (Word 2007/2010, Office 2010, Office for Mac 2011, Word Web Apps, SharePoint) where remote code execution is possible via crafted Word document properties. Root cause: improper handling/parsing of Word file format elements allows arbit...

CVE-2018-8627

CVE-2018-8627 (Microsoft Excel information disclosure) : An information-disclosure flaw in Excel when reading memory out of bounds due to an uninitialized variable. Affected products include Microsoft Office/Excel and related viewers. Exploitation requires opening a specially crafted file; succes...

CVE-2020-0893

CVE-2020-0893 is a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. Affected software is SharePoint Server (no explicit version range provided in the documents). The issue is documented in the NVD entry and...

CVE-2020-1100

CVE-2020-1100 is an XSS vulnerability in Microsoft SharePoint Server where improper sanitization of a specially crafted web request can lead to compromised data in affected SharePoint deployments. The vulnerability affects SharePoint Server components handling input to web requests; CVSS v3.1 vec...

CVE-2020-1297

Technical details for CVE-2020-1297 are not publicly available in the provided connected documents. Monitor for updates and new disclosures that specify affected products, versions, impact, and remediation.

CVE-2020-17015

CVE-2020-17015 is a Microsoft SharePoint Server Spoofing Vulnerability. The connected sources confirm this vulnerability affects SharePoint Server in on‑premises deployments and indicate the root issue is spoofing (authentication-related) with an impact on integrity (I) and network access as the ...

CVE-2014-0251

CVE-2014-0251 affects Microsoft SharePoint products including Windows SharePoint Services 3.0 SP3, SharePoint Server 2007 SP3, 2010 SP1/SP2, 2013 Gold/SP1, SharePoint Foundation 2010 SP1/SP2/2013 Gold/SP1, Project Server 2010 SP1/SP2/2013 Gold/SP1, Web Applications 2010 SP1/SP2, Office Web Apps S...

CVE-2017-0030

Technical details about CVE-2017-0030 are not publicly available in the provided connected documents; no specific affected products, exploit info, or remediation are included. Monitor for updates.

CVE-2020-0978

Technical details for CVE-2020-0978 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for official updates.

CVE-2020-1205

CVE-2020-1205 affects Microsoft SharePoint Server. The vulnerability arises from improper sanitization of crafted web requests, enabling an authenticated attacker who can reach an affected SharePoint server to perform cross-site scripting and execute scripts in the user’s security context. This c...

CVE-2020-1320

Technical details about CVE-2020-1320 are not publicly provided in the connected documents. The EUVD entries mention malware unrelated to this CVE. Monitor for official disclosures or vendor advisories for specifics.

CVE-2020-1452

CVE-2020-1452 — SharePoint RCE : A remote code execution vulnerability where SharePoint fails to validate the source markup of application packages. Exploitation requires a user-uploaded, specially crafted SharePoint app package, allowing arbitrary code execution in the SharePoint application poo...

CVE-2021-1712

CVE-2021-1712 is described in the provided documents as a Microsoft SharePoint elevation-of-privilege vulnerability. The NVD entry provides a CVSS v3.1 base score of 8.0 (NETWORK, LOW attack complexity, Privileges Required: LOW, User Interaction: REQUIRED, with HIGH confidentiality/integrity/avai...

CVE-2021-43242

CVE-2021-43242 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources indicate the issue affects multiple SharePoint Server editions (2013/2016/2019 and SharePoint Server Subscription Edition) and is described as a session spoofing flaw that can allow an attacker to perform ac...

CVE-2026-66805

A CVE-2026-66805 entry exists with conflicting descriptions across sources. The connected Red Hat CVE details describe a flaw in the console component of a managed-cluster hub: an attacker who can write to container logs can inject malicious code into the hub console user’s browser session by vie...

CVE-2016-0134

CVE-2016-0134 affects multiple Microsoft Office products, including Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1/RT SP1, Word 2016, Word for Mac 2011/2016, Office Compatibility Pack SP3, and related SharePoint/Web Apps components. The vulnerability is described as a memory corrupt...

CVE-2016-7290

CVE-2016-7290 affects Microsoft Word/Office components (Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, Office Web Apps 2010 SP2). The vulnerability allows a crafted document to cause an out-o...

CVE-2019-1036

CVE-2019-1036 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where an attacker with authentication can exploit insufficient sanitization of crafted web requests. Successful exploitation could allow the attacker to execute scripts in the user’s browser, read co...

CVE-2020-0933

Technical details about CVE-2020-0933 are not publicly available in the provided documents (no affected products, exploit info, or remediation details are described). Monitor for updates.

CVE-2020-1069

CVE-2020-1069 is a Microsoft SharePoint Server remote code execution vulnerability described as failing to properly identify and filter unsafe ASP.NET web controls. Public documents indicate an RCE could occur when processing unsafe ASP.NET controls (and related SharePoint package handling) with ...

CVE-2020-17016

CVE-2020-17016 is described in the CVE entry as a Microsoft SharePoint Server spoofing vulnerability. Connected Nessus plugins indicate that multiple SharePoint Server versions (2010, 2013, 2016, 2019) are affected and that November 2020 security updates address this issue among others; however, ...

CVE-2022-30159

CVE-2022-30159 is identified as a Microsoft Office information disclosure vulnerability referenced by security updates KB5002062/KB5002222/KB5002224. The connected documents indicate affected ecosystems include SharePoint Server and Microsoft Office components, with remediation via the listed sec...

CVE-2015-0085

CVE-2015-0085 is a use-after-free vulnerability in Microsoft Office components (including Office 2007/2010/2013 suites and related SharePoint/Viewer components) that enables remote code execution via a crafted Office document. The issue affects a broad set of Office applications and SharePoint-re...

CVE-2017-0027

CVE-2017-0027 affects Microsoft Office products including Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1. Description: information disclosure from process memory when processing a crafted Office docume...

CVE-2019-1442

CVE-2019-1442 : The connected sources confirm a vulnerability in Microsoft SharePoint Server 2019 (64‑bit) where a security feature bypass occurs when URLs are not validated, enabling information disclosure/credential exposure when an attacker delivers a specially crafted file. The entry is tied ...