CVE-2019-0585

CVE-2019-0585 is a remote code execution vulnerability in Microsoft Word/Office products caused by improper handling of objects in memory. Exploitation could occur via specially crafted Word files, potentially in contexts like email/preview panes, with the attacker gaining the same user rights as...

CVE-2025-53770

CVE-2025-53770 is a critical remote code execution vulnerability in on-premises Microsoft SharePoint Server, achieved via deserialization of untrusted data and an unauthenticated POST to ToolPane.aspx. The attack chain typically bypasses authentication, retrieves MachineKey values from the web.co...

CVE-2023-36762

CVE-2023-36762 is a Microsoft Word remote code execution vulnerability. The available documents confirm an impact on Word and related Word components, with an exploit path requiring user interaction and local access (CVSS 3.1: AV=L, AC=L, PR=None, UI=Required, C/H/I/H/A=L). Public details note po...

CVE-2023-36764

CVE-2023-36764 affects Microsoft SharePoint Server and is an Elevation of Privilege vulnerability. The connected CNVD entry confirms an elevation of privilege issue exists in SharePoint Server; MSRC details indicate a patch exists for SharePoint Server 2019 (KB5002472). The remediation requires i...

CVE-2024-38094

CVE-2024-38094 is a Microsoft SharePoint deserialization vulnerability that allows remote code execution. Connected sources indicate an authenticated attacker with Site Owner permissions can inject and execute arbitrary code on the SharePoint server, with exploit activity noted in the wild (CISA ...

CVE-2025-53771

CVE-2025-53771 is an authentication spoofing (patch-bypass) vulnerability in Microsoft SharePoint Server on-premises, enabling bypass of access checks on /layouts/15/ToolPane.aspx (DisplayMode=Edit) via crafted Referer headers. Connected docs also describe a related RCE chain when paired with CVE...

CVE-2017-0281

CVE-2017-0281 / CVE-2017-0262 describe a remote code execution flaw in Microsoft Office and related components triggered by memory handling errors while processing specially crafted Office files (EPS in particular). Affected products include Office 2010 SP2, Office 2013 SP1, Office 2016, and broa...

CVE-2025-49704

CVE-2025-49704 (SharePoint on‑premises) is part of the ToolShell chain that combines CVE-2025-49706 (authentication bypass) with a deserialization/RCE flaw. Public docs describe unauthenticated or spoofed-access POSTs to ToolPane.aspx, enabling remote code execution and post‑exploitation activity...

CVE-2025-21400

CVE-2025-21400 is a Microsoft SharePoint Server remote code execution vulnerability. Connected advisories confirm affected product is SharePoint Server with RCE impact and a CVSS v3.1 base score of 8.0 (High). Patches are available: KB5002681 (SharePoint Server Subscription Edition) and KB5002685...

CVE-2024-21426

CVE-2024-21426 is a Microsoft SharePoint Server remote code execution vulnerability. Publicly documented impact affects multiple SharePoint products, including SharePoint Server 2019, SharePoint Server Subscription Edition, SharePoint Enterprise Server 2016, and related on-premises deployments. R...

CVE-2023-21742

CVE-2023-21742 affects Microsoft SharePoint Server family. A GitHub PoC for CVE-2023-21742 demonstrates an Improper Access Control path in SharePoint’s webpartpages (POST to _vti_bin/webpartpages.asmx, ConvertWebPartFormat) that leaks an attribute/property; the PoC explicitly notes it is not a fu...

CVE-2022-30172

CVE-2022-30172 is an Microsoft Office information disclosure vulnerability. Connected documents indicate remediation via Microsoft security updates KB5002062/KB5002222/KB5002224/KB5002214 addressing Office/SharePoint components in various Server editions. Exploitation details and affected product...

CVE-2021-31950

CVE-2021-31950 is an on‑premises Microsoft SharePoint Server spoofing vulnerability (CWE: spoofing) with a documented SSRF/Server‑Side Request Forgery angle. Public details tie exploitation to SharePoint Server 16.0.x (example: 16.0.10372.20060) via GetXmlDataFromDataSource, enabling content spoo...

CVE-2023-21743

Mode C CVE-2023-21743 affects Microsoft SharePoint Server and is a security feature bypass vulnerability. An unauthenticated attacker could bypass authentication and establish an anonymous connection to a vulnerable SharePoint farm. Exploitation requires triggering a SharePoint upgrade action, wh...

CVE-2022-21837

CVE-2022-21837 is a remote code execution vulnerability in Microsoft SharePoint Server (on‑prem). Connected sources confirm that exploitation could allow an attacker to run arbitrary code on the SharePoint server (e.g., potentially escalate to SharePoint admin) if the vulnerable SharePoint Server...

CVE-2023-28288

CVE-2023-28288 is a network-exploitable spoofing vulnerability affecting Microsoft SharePoint Server families. Public references (Exploit-DB entry) show a remote exploit against SharePoint Enterprise Server 2016, aligning with the vulnerability class described as spoofing in the CVE record. The C...

CVE-2024-21318

CVE-2024-21318 affects Microsoft SharePoint Server and is described as a remote code execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 8.8 ( HIGH ) with network attack vector, low attack complexity, and privileges required as LOW, no user interaction, and impact on confidenti...

CVE-2021-28474

CVE-2021-28474 maps to a Microsoft SharePoint Server remote code execution vulnerability. Public details within the provided docs are limited to high‑level descriptions (SharePoint Server RCE) and CVSS metrics; no explicit exploit vectors or affected versions are stated in Connected documents. Th...

CVE-2022-21840

CVE-2022-21840 is a Microsoft Office remote code execution vulnerability. Public documentation notes an Office RCE that can be exploited via social engineering (e.g., opening a malicious attachment or visiting a malicious site) and may require user interaction. The CVSS details indicate high impa...

CVE-2022-24472

CVE-2022-24472 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources confirm affected product family (SharePoint Server variants) and indicate remediation via security updates KB5002191 (SharePoint Server Subscription Edition) and KB5002180 (SharePoint Server 2019), which add...

CVE-2021-34467

CVE-2021-34467 affects Microsoft SharePoint Server (SharePoint Server 2019). The connected documents indicate this is a remote code execution vulnerability addressed by the security update KB5001975, which resolves both the RCE and a spoofing issue. The patch is for 64-bit SharePoint Server 2019 ...

CVE-2021-34520

CVE-2021-34520 concerns a Microsoft SharePoint Server Remote Code Execution vulnerability. The related connected document KB5001975 confirms a security update for SharePoint Server 2019 (16.0.10376.20001) that addresses this vulnerability. The CVE is described with high severity in accompanying m...

CVE-2021-34468

CVE-2021-34468 is a Microsoft SharePoint Server Remote Code Execution vulnerability. The initial data indicates an RCE weakness affecting SharePoint Server with a CVSS v3.1 base score of 8.0 (HIGH), an adjacent network attack vector, low attack complexity, no privileges required, and user interac...

CVE-2021-28453

CVE-2021-28453 is a Microsoft Word remote code execution vulnerability. The primary sources (NVD entry for CVE-2021-28453) and connected Nessus plugins reference Word/Office products being affected by a remote code execution vulnerability tied to this CVE. Some Nessus entries list Word/Office as ...

CVE-2024-26251

CVE-2024-26251 refers to a Microsoft SharePoint Server spoofing vulnerability that allows an attacker to impersonate another user when a victim follows a rogue link. Connected sources confirm exploitation depends on social/drive-by user interaction, with root cause in improper spoofing/auth conte...

CVE-2020-17118

CVE-2020-17118 is a remote code execution vulnerability in Microsoft SharePoint Server. The connected documents confirm it affects multiple SharePoint Server versions (2010, 2013, 2016, 2019) and that systems missing security updates are affected. No explicit root-cause details are provided in th...

CVE-2021-27076

CVE-2021-27076 is a SharePoint Server Remote Code Execution flaw rooted in InfoPath session state deserialization. The vulnerability arises when the server deserializes a crafted DocumentSessionState via the BinaryFormatter, enabling arbitrary code execution with SYSTEM privileges after deseriali...

CVE-2021-31966

CVE-2021-31966 is a Microsoft SharePoint Server remote code execution vulnerability. The connected documents confirm affected product families include SharePoint Server (2013/2016/2019 on-premises) and show that patches released June 8, 2021 (KB5001922/KB5001946, and related advisories) address t...

CVE-2021-26418

Microsoft SharePoint Server 2019 is affected by CVE-2021-26418 (Spoofing). The vulnerability is addressed by the May 11, 2021 security update KB5001916, which resolves the spoofing issue alongside related fixes. The update fixes remote-code-execution/spoofing concerns and requires installing KB50...

CVE-2023-21744

CVE-2023-21744 is a Microsoft SharePoint Server remote code execution vulnerability. Connected sources confirm that it affects SharePoint Server products (Foundation 2013, Server 2016/2019 and subscriptions) and that exploitation leads to arbitrary code execution with network access and no user i...

CVE-2021-34519

CVE-2021-34519 is a Microsoft SharePoint Server information disclosure vulnerability affecting on‑premises SharePoint Server variants. Connected documents confirm it is an information disclosure issue tied to SharePoint Server (2013/2016/Enterprise Server 2016) and reference security updates (e.g...

CVE-2026-45456

CVE-2026-45456 affects Microsoft Office apps (notably Outlook and Word) and is caused by a resource access type confusion that can lead to local code execution. The vulnerability allows an authenticated, local attacker to run arbitrary code without user interaction, with high impact on confidenti...

CVE-2017-8509

CVE-2017-8509 is an Office remote code execution vulnerability that arises when Office components mishandle objects in memory, allowing an attacker to take control of an affected system if a user opens a crafted Office file. Public details in connected documents indicate the vulnerability affects...

CVE-2021-31963

CVE-2021-31963 is a Microsoft SharePoint Server remote code execution vulnerability affecting on-premises SharePoint Server. Connected sources confirm the issue exists and that Microsoft released fixes in June 2021 (e.g., KB5001954 for SharePoint Enterprise Server 2013 and related updates noted i...

CVE-2020-17121

No concrete technical details for CVE-2020-17121 are present in the provided connected documents; they only reference it among December 2020 SharePoint updates without specifics on affected components or root cause.

CVE-2024-38018

CVE-2024-38018 affects Microsoft SharePoint Server and is described as a remote code execution vulnerability. Connected sources indicate the issue arises from improper handling of serialized instances of the SPThemes class, enabling an attacker to execute arbitrary code on the target system. Repo...

CVE-2020-17115

CVE-2020-17115 is described across connected sources as a session spoofing vulnerability in Microsoft SharePoint Server. The provided Nessus plugin entries group this CVE with other SharePoint CVEs and indicate vulnerable state when updates are missing (e.g., December 2020 security updates). Conc...

CVE-2021-31172

CVE-2021-31172 is a Microsoft SharePoint Server spoofing vulnerability. Public docs here indicate the issue is addressed by the May 11, 2021 security update for SharePoint Server 2019 (KB5001916), which also covers related CVEs in the same bulletin. The CVE entry cites a SharePoint spoofing vulne...

CVE-2021-31173

CVE-2021-31173 is a Microsoft SharePoint Server Information Disclosure vulnerability. Public sources (NVD) assign a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction) with a high potential impact to confidentiality and no impact to integrity...

CVE-2021-34517

CVE-2021-34517 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources indicate this CVE is addressed by Security Update KB5001975 for SharePoint Server 2019 (16.0.10376.20001). The KB entry associates the CVE with SharePoint Server spoofing remediation and notes that the updat...

CVE-2024-30044

CVE-2024-30044 is a Microsoft SharePoint Server Remote Code Execution vulnerability reported across multiple feeds. The connected docs identify the affected product as SharePoint Server and describe a remote code execution flaw that could allow an attacker to run arbitrary code on the target syst...

CVE-2022-30157

CVE-2022-30157 relates to Microsoft SharePoint Server remote code execution. CNVD-2022-59590 and the MSRC advisory KB5002224 describe a remote-code-execution vulnerability in SharePoint Server (Subscription Edition included). The patch KB5002224 (June 14, 2022) mitigates this by applying security...

CVE-2024-30043

CVE-2024-30043 affects Microsoft SharePoint Server (on-premises) and is caused by improper restriction of XML External Entity (XXE) references, enabling information disclosure. Public details include an XXE exploit example for SharePoint Server 2019 and related advisories. Affected product/versio...

CVE-2021-28478

Technical details about CVE-2021-28478 are not provided in the connected documents. They only reference a SharePoint spoofing vulnerability without specific affected versions, vectors, or remediation. Monitor official disclosures and patches for updates.

CVE-2024-38023

CVE-2024-38023 affects on-premises Microsoft SharePoint Server. Exploitation path described in connected docs: an attacker with Site Owner permissions can abuse the BDC (Business Data Connectivity) feature via a malicious BDCMetadata.bdcm file to trigger reflective code execution, resulting in RC...

CVE-2017-0254

CVE-2017-0254 concerns a remote code execution in Microsoft Office applications (Word, PowerPoint, etc.) and related components when the software fails to properly handle objects in memory. The vulnerability affects multiple Office products across Windows and macOS (e.g., Word 2007, Office 2010 S...

CVE-2020-17120

The CVE-2020-17120 entry corresponds to a Microsoft SharePoint Information Disclosure Vulnerability. Connected sources confirm it is part of multiple SharePoint Server vulnerabilities across several versions (2010, 2013, 2016, 2019) and is listed among updates released in December 2020. The vulne...

CVE-2020-17089

CVE-2020-17089 is a Microsoft SharePoint elevation-of-privilege vulnerability reported across multiple advisories. Connected sources confirm the issue affects SharePoint Server instances and is associated with related CVEs (e.g., CVE-2020-17115, CVE-2020-17118, CVE-2020-17120, CVE-2020-17121, CVE...

CVE-2021-28450

CVE-2021-28450 is a Microsoft SharePoint Denial of Service vulnerability affecting SharePoint Server 2010–2019 (and related versions) with CVE-2021-28453 referenced as a Word RCE vulnerability. Connected advisories/scans indicate multiple vulnerabilities in SharePoint Server lines and map to Micr...

CVE-2022-30158

CVE-2022-30158 corresponds to a Microsoft SharePoint Server remote code execution vulnerability. According to the connected sources, the vulnerability affects Microsoft SharePoint Server with RCE potential impacting confidentiality, integrity, and availability (all High). The CVSS v3.1 score is 8...