103 matches found
CVE-2021-28450
Microsoft SharePoint Denial of Service Vulnerability
CVE-2021-31171
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2021-31964
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-33157
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2025-21344
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-36894
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2023-33160
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2017-8511
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.
CVE-2024-30100
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-44690
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2020-17061
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2022-41038
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-49062
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2017-8742
A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft SharePoin...
CVE-2023-33134
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-32987
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2024-38024
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2019-0949
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0950, CVE-2019-0951.
CVE-2019-0558
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Micros...
CVE-2017-8743
A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742.
CVE-2023-33159
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-30159
Microsoft Office Information Disclosure Vulnerability
CVE-2024-49065
Microsoft Office Remote Code Execution Vulnerability
CVE-2016-3282
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Shar...
CVE-2018-8580
An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF), aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microso...
CVE-2019-0950
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0951.
CVE-2024-43464
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-21393
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2018-8161
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Word, Word, Microsoft Office, Microsoft SharePoint. This CVE ID is unique from C...
CVE-2019-0557
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019...
CVE-2022-41037
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41036
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-38227
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-38228
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-49070
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2018-8254
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint. ...
CVE-2024-43466
Microsoft SharePoint Server Denial of Service Vulnerability
CVE-2017-8569
Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability".
CVE-2024-49068
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2018-8149
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoin...
CVE-2018-8156
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint, Microsoft Project Server. ...
CVE-2024-43503
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2018-8252
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from...
CVE-2018-8155
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from...
CVE-2024-49064
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2018-0864
SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability".
CVE-2025-30378
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
CVE-2025-29976
Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.
CVE-2025-49704
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-30382
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.