Microsoft Sharepoint Server
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Sharepoint Server.
Recent Microsoft Sharepoint Server Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-105719 | CVE-2026-105719 Microsoft SharePoint Server Information Disclosure Vulnerability | October 13, 2026 |
| CVE-2026-62829 | CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability | August 11, 2026 |
| CVE-2026-62837 | CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability | August 11, 2026 |
| CVE-2026-65658 | CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability | August 11, 2026 |
| CVE-2026-63514 | CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability | August 11, 2026 |
| CVE-2026-63520 | CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability | August 11, 2026 |
| CVE-2026-63516 | CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability | August 11, 2026 |
| CVE-2026-63512 | CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability | August 11, 2026 |
| CVE-2026-62827 | CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability | August 11, 2026 |
| CVE-2026-64922 | CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability | August 11, 2026 |
By the Year
In 2026 there have been 161 vulnerabilities in Microsoft Sharepoint Server with an average score of 7.0 out of ten. Last year, in 2025 Sharepoint Server had 35 security vulnerabilities published. That is, 126 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.95
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 161 | 7.01 |
| 2025 | 35 | 7.97 |
| 2024 | 21 | 7.15 |
| 2023 | 27 | 7.53 |
| 2022 | 29 | 7.76 |
| 2021 | 53 | 7.09 |
| 2020 | 121 | 6.62 |
| 2019 | 48 | 6.78 |
| 2018 | 56 | 5.95 |
It may take a day or so for new Sharepoint Server vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Sharepoint Server Security Vulnerabilities
Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-88164
8.8 - High
- October 14, 2026
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
AuthZ
Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-96044
8.8 - High
- October 13, 2026
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Improper Validation of Specified Type of Input
Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-88206
7.5 - High
- October 13, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
SSRF
Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-88200
8.8 - High
- October 13, 2026
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Privilege Context Switching Error
Oct 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-88166
8.8 - High
- October 13, 2026
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Integer Overflow or Wraparound
Oct 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-88163
8.8 - High
- October 13, 2026
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Integer Overflow or Wraparound
Oct 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-85932
6.5 - Medium
- October 13, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Directory traversal
Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-70246
8.8 - High
- October 13, 2026
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
AuthZ
Oct 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-70217
4.9 - Medium
- October 13, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Authorization
Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-70202
7.5 - High
- October 13, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
SSRF
Oct 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-97783
8.1 - High
- October 13, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
XSS
Oct 2026: Microsoft Office SharePoint Tampering Vulnerability
CVE-2026-97782
6.8 - Medium
- October 13, 2026
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
Side Channel Attack
Oct 2026: Microsoft Office Excel Remote Code Execution Vulnerability
CVE-2026-97755
8.8 - High
- October 13, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Out-of-bounds Read
Oct 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-88209
4.6 - Medium
- October 13, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Oct 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-88208
4.6 - Medium
- October 13, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Oct 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-88204
7.3 - High
- October 13, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-88198
8.8 - High
- October 13, 2026
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
AuthZ
Oct 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-88155
8.8 - High
- October 13, 2026
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Heap-based Buffer Overflow
Oct 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-85900
8.8 - High
- October 13, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Oct 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-70298
6.5 - Medium
- October 13, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Directory traversal
Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-70266
8.8 - High
- October 13, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
SQL Injection
Oct 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-70259
6.5 - Medium
- October 13, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
SSRF
Oct 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-70267
7.2 - High
- October 13, 2026
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Inclusion of Functionality from Untrusted Control Sphere
Oct 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-70251
7.5 - High
- October 13, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
SSRF
Oct 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69943
8.8 - High
- October 13, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Directory traversal
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69465
8.8 - High
- September 08, 2026
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
AuthZ
Sep 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-69904
3.5 - Low
- September 08, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
SSRF
Sep 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-69636
6.5 - Medium
- September 08, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
SQL Injection
Sep 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-69464
8.8 - High
- September 08, 2026
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Execution with Unnecessary Privileges
Sep 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-69615
3.5 - Low
- September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Sep 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-69417
7.3 - High
- September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Sep 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-69409
6.5 - Medium
- September 08, 2026
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Execution with Unnecessary Privileges
Sep 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-69402
7.3 - High
- September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69282
8.8 - High
- September 08, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Authorization
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69273
8.8 - High
- September 08, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Authorization
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69268
8.8 - High
- September 08, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Authorization
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69804
7.5 - High
- September 08, 2026
Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
TOCTTOU
Sep 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-69683
6.5 - Medium
- September 08, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
SSRF
Sep 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-69690
4.6 - Medium
- September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69724
8.8 - High
- September 08, 2026
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
AuthZ
Sep 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-69716
8.8 - High
- September 08, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
SQL Injection
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62839
6.5 - Medium
- August 11, 2026
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Insufficiently Protected Credentials
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62917
4.6 - Medium
- August 11, 2026
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Improper Input Validation
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-58639
6.5 - Medium
- August 11, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
SSRF
Aug 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-70306
9.3 - Critical
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
XSS
Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-70326
8.8 - High
- August 11, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
SSRF
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-66808
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-66805
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-64921
8.8 - High
- August 11, 2026
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Missing Authentication for Critical Function
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64916
4.6 - Medium
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Sharepoint Server or by Microsoft? Click the Watch button to subscribe.
