CVE-2016-0052

The CVE-2016-0052 issue affects Microsoft Word/Office across multiple versions (Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Serve...

CVE-2018-8160

CVE-2018-8160 is an information-disclosure vulnerability in Microsoft Outlook (Office suite). The vulnerability is triggered when a user opens a malicious message, which could lead to disclosure of sensitive information. The attacker’s capability path involves sending a crafted email that lures t...

CVE-2025-47166

CVE-2025-47166 is a remote code execution vulnerability in Microsoft SharePoint Server/Office SharePoint caused by deserialization of untrusted data. An authenticated attacker could trigger code execution over the network on the affected server. The entry is tracked with a high CVSS v3.1 base sco...

CVE-2015-6093

CVE-2015-6093 is a Microsoft Office memory-corruption vulnerability enabling remote code execution when a user opens a specially crafted Office file. The affected products include Office 2007 SP3, Office 2010 SP2, Office 2013 SP1/RT SP1, Office 2016, Word Automation Services on SharePoint Server ...

CVE-2018-0922

CVE-2018-0922 is a remote code execution vulnerability arising from how Office objects are handled in memory across multiple Microsoft Office products (Word, Excel, SharePoint, Web Apps, Viewer, etc.). Connected sources confirm the issue affects a wide range of Office/SharePoint versions (e.g., O...

CVE-2019-1032

CVE-2019-1032 involves an XSS vulnerability in Microsoft SharePoint Server where unsanitized web requests can be exploited by an authenticated attacker. Exploitation would allow script execution in the user’s browser, potentially reading restricted content, acting on the user’s behalf (e.g., chan...

CVE-2014-0260

CVE-2014-0260 affects Microsoft Word and related Office components (Word Viewer, Office Web Apps, SharePoint, etc.). The issue arises from memory corruption while parsing crafted Office documents, enabling remote code execution or, per source, possible denial of service. The vulnerability is mapp...

CVE-2015-1650

CVE-2015-1650 is a use-after-free vulnerability in Microsoft Word/Office components that allows remote code execution via crafted Office documents. Affected products include Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compatibility Pack SP3,...

CVE-2015-2468

CVE-2015-2468 affects Microsoft Office components across Word/Office for Windows and Mac, including Word 2007 SP3, 2010 SP2, 2013 SP1, Office for Mac 2011/2016, Office Compatibility Pack SP3, Word Viewer, and related SharePoint/Office Web Apps. The root cause is memory corruption triggered by pro...

CVE-2018-0864

CVE-2018-0864 affects SharePoint Project Server 2013 and SharePoint Enterprise Server 2016. The root cause is improper sanitization of crafted web requests, leading to information disclosure and potential privilege abuse. The issue is addressed by Microsoft security updates KB4011680 (SharePoint ...

CVE-2018-8431

CVE-2018-8431 describes an elevation of privilege in Microsoft SharePoint Server and SharePoint when a specially crafted web request is not properly sanitized. Affected products: Microsoft SharePoint Server and Microsoft SharePoint. Root cause: insufficient sanitization/input validation of crafte...

CVE-2020-1298

Technical details for CVE-2020-1298 are not publicly provided in the connected documents. Monitor for updates; current materials do not specify affected products, root cause, impact, or fixes beyond the initial description.

CVE-2026-55121

CVE-2026-55121 corresponds to an out-of-bounds read in Microsoft Office that enables an unauthenticated or authorized local attacker to disclose information. The public descriptions across NVD/MSRC and EUVD notes indicate the vulnerability affects Microsoft Office components and results in local ...

CVE-2015-6094

Summary (CVE-2015-6094) A memory corruption vulnerability in Microsoft Office components (notably Excel) that could allow remote code execution when processing a specially crafted Office document. Affected products include Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for M...

CVE-2016-7236

CVE-2016-7236 affects Microsoft Office components, notably Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2. The root cause is a memory handling flaw that allows remote code execution when a user opens a specially crafted Office document, wi...

CVE-2018-8572

CVE-2018-8572 affects Microsoft SharePoint, specifically SharePoint Server and SharePoint. The vulnerability arises because the server does not properly sanitize/filter a specially crafted web request, enabling an authenticated attacker to elevate privileges on the affected SharePoint Server. Con...

CVE-2020-1295

CVE-2020-1295 is an Elevation of Privilege in Microsoft SharePoint. The initial entry is supported by connected sources noting SharePoint vulnerabilities and an associated Microsoft security update (KB4484405) for SharePoint Server Enterprise 2013 that resolves CVE-2020-1295; other Nessus entries...

CVE-2022-41036

CVE-2022-41036 is a remote code execution vulnerability affecting Microsoft SharePoint Server (on‑premises). The connected documents confirm it as a SharePoint Server RCE issue that was addressed by Microsoft security updates. In particular, security updates KB5002287 (SharePoint Server 2016) and...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-62827

CVE-2026-62827 is a Microsoft SharePoint vulnerability describing improper authentication that allows an authorized attacker to elevate privileges over a network. Documents indicate the affected product is Microsoft Office SharePoint/SharePoint Server. The issue is a privilege-escalation flaw wit...

CVE-2026-64916

CVE-2026-64916 affects Microsoft Office SharePoint Server and relates to improper neutralization of input during web page generation (XSS), enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 4.6 (Medium) with Network access, Low attack complexity, Low privileges r...

CVE-2026-70321

CVE-2026-70321: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Affected software is Microsoft SharePoint; root cause is deserialization of untrusted data. Impact is high (CVE-2026-70321 CVSS 3.1: 8.8/10). No remediati...

CVE-2026-70324

CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...

CVE-2020-1318

Technical details for CVE-2020-1318 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2026-65658

CVE-2026-65658 involves a deserialization vulnerability in Microsoft Office SharePoint that can allow an authorized attacker to execute arbitrary code over the network. The published description identifies deserialization of untrusted data as the root cause, with the CVSS 3.1 base score of 8.8 (H...

CVE-2016-7234

CVE-2016-7234 is a memory-corruption vulnerability in Microsoft Office products (e.g., Word 2007, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word for Mac 2011, Excel for Mac 2011, Word 2016 for Mac, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and related components) that allows...

CVE-2025-30384

CVE-2025-30384 describes a vulnerability in Microsoft Office SharePoint Server where deserialization of untrusted data can allow an unauthorized attacker to execute code locally. The affected products appear to be SharePoint Server variants (Enterprise/Standard) and SharePoint Server 2019/Subscri...

CVE-2026-55038

CVE-2026-55038 is a stack-based buffer overflow in Microsoft Word (Office) that can allow local code execution. The vulnerability affects Word and is exploitable by a crafted file opened by a user with no privileges required, though user interaction is needed (per CVSS: LOCAL, UI: REQUIRED, Privi...

CVE-2015-6039

CVE-2015-6039 is an XSS vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 that allows remote authenticated users to inject arbitrary web script or HTML via crafted content in an Office Marketplace instance (Security Feature Bypass). Public sources confirm th...

CVE-2020-1105

CVE-2020-1105 is a spoofing vulnerability affecting Microsoft SharePoint Server, caused by improper sanitization of a specially crafted web request. The linked sources (NVD entry and CVE records) consistently identify this as a spoofing issue distinct from CVE-2020-1104/1107. The available docume...

CVE-2025-53733

CVE-2025-53733 affects Microsoft Word (Office). The issue is caused by incorrect conversion between numeric types in Word, enabling a local attacker to execute arbitrary code when a specially crafted document is opened or when Preview Pane is used, per vendor descriptions and multiple security pa...

CVE-2019-0556

CVE-2019-0556 is a cross-site scripting (XSS) vulnerability affecting Microsoft SharePoint Server. The connected CNVD entry specifies Microsoft SharePoint Enterprise Server 2013 SP1 and describes that the vulnerability arises from the program failing to properly filter specially crafted web reque...

CVE-2026-35439

CVE-2026-35439 is a remote code execution vulnerability in Microsoft SharePoint Server caused by deserialization of untrusted data. An authorized attacker can exploit this over a network to execute code on affected systems. The CVE is associated with SharePoint Server (on‑premises) and the approv...

CVE-2026-55127

CVE-2026-55127 is a heap-based buffer overflow in Microsoft Word (Office) that enables local code execution. Public sources corroborate a Word-related RCE risk, with the issue categorized under Office/Word vulnerabilities in July 2026 patch disclosures. Remediation is via Microsoft’s July 2026 se...

CVE-2016-3281

CVE-2016-3281 is a Microsoft Office memory corruption vulnerability affecting Office 2010 SP2, Word 2010 SP2, Word 2013 SP1/RT, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2. The root cause is memory corruptio...

CVE-2017-8569

CVE-2017-8569 affects Microsoft SharePoint Server. The issue stems from improper sanitization of crafted web requests, enabling elevation of privilege and cross-site scripting in the authenticated user context. Affected product scope includes SharePoint Server (notably 2016/Enterprise variants); ...

CVE-2025-30378

CVE-2025-30378 is a Microsoft SharePoint vulnerability described as a deserialization of untrusted data in Office SharePoint that allows a local attacker to execute code. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with LOCAL attack vector, HIGH impact to confidentiality, integrity, a...

CVE-2025-30382

CVE-2025-30382 is a Microsoft SharePoint Server remote code execution vulnerability caused by deserialization of untrusted data in Office SharePoint. The CVE affects SharePoint Server environments and is exploitable locally with user interaction required (per CVSS vector: Local, Privileges=None, ...

CVE-2026-26114

CVE-2026-26114 concerns a deserialization vulnerability in Microsoft SharePoint Server that allows an authorized attacker to execute code over the network. The issue is described as deserialization of untrusted data in SharePoint/Office components, enabling remote code execution with high impact ...

CVE-2015-2558

CVE-2015-2558 is a use-after-free memory corruption vulnerability in Microsoft Office components (e.g., Excel 2007 SP3, 2010 SP2, 2013 SP1/RT SP1, 2016; Office for Mac 2011/2016; Excel Services on SharePoint Server 2007 SP3/2010 SP2/2013 SP1) that allows remote code execution via a long fileVersi...

CVE-2021-42320

CVE-2021-42320 is a spoofing vulnerability affecting Microsoft SharePoint Server (including Subscription Edition and on-premises releases like 2016/2019). Exploitation could allow an attacker to perform actions with the privileges of another user. Microsoft’s December 2021 security update KB50020...

CVE-2024-38228

CVE-2024-38228 is a Microsoft SharePoint Server remote code execution vulnerability. Public sources indicate it affects SharePoint Server and is addressed by security updates KB5002640 (SharePoint Server Subscription Edition), KB5002624 (SharePoint Enterprise Server 2016), and KB5002639 (SharePoi...

CVE-2024-43466

Microsoft SharePoint Server Denial of Service vulnerability (CVE-2024-43466) affects on-prem SharePoint Server. The provided documents describe a denial-of-service issue but do not specify the exact vulnerable component, root cause, or affected product versions. Related entries indicate security ...

CVE-2010-3243

CVE-2010-3243 describes an HTML sanitization vulnerability (HTML Sanitization Vulnerability) causing cross-site scripting in Microsoft Internet Explorer 8 and in SharePoint components: Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2. The root cause is improper filtering ...

CVE-2013-3849

Summary: CVE-2013-3849 is part of a set of related Word memory corruption vulnerabilities affecting Microsoft Word Automation Services and related Word components (SharePoint 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility...

CVE-2014-6357

CVE-2014-6357 is a use-after-free remote code execution vulnerability reported in Microsoft Office products (Office 2010 SP2, Office 2013 SP1/Gold, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2/2013) and related Office Web ...

CVE-2016-0054

CVE-2016-0054 affects multiple Microsoft Office components (notably Excel across Windows and macOS, including Office viewers/SharePoint services). The underlying issue is memory corruption triggered by processing a crafted Office document, enabling remote code execution. Public references describ...

CVE-2025-54906

CVE-2025-54906 affects Microsoft Office (notably Excel) and allows local code execution due to a memory-management issue described as a “Free of memory not on the heap in Microsoft Office.” Connected sources confirm multiple Office components (Word/Excel) are affected and cite updates that fix th...

CVE-2026-40357

Technical details for CVE-2026-40357 are not publicly available in the provided documents. Monitor for updates from Microsoft and CVE records.

CVE-2026-47634

Microsoft Office SharePoint is affected by CVE-2026-47634, a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. The vulnerability allows an authorized attacker to spoof users over a network. According to the sources, the issue impacts Shar...