Microsoft Sharepoint Server
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Sharepoint Server.
Recent Microsoft Sharepoint Server Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-62829 | CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability | August 11, 2026 |
| CVE-2026-62917 | CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability | August 11, 2026 |
| CVE-2026-62837 | CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability | August 11, 2026 |
| CVE-2026-65658 | CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability | August 11, 2026 |
| CVE-2026-63514 | CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability | August 11, 2026 |
| CVE-2026-63520 | CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability | August 11, 2026 |
| CVE-2026-63516 | CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability | August 11, 2026 |
| CVE-2026-63512 | CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability | August 11, 2026 |
| CVE-2026-62827 | CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability | August 11, 2026 |
| CVE-2026-64922 | CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability | August 11, 2026 |
By the Year
In 2026 there have been 136 vulnerabilities in Microsoft Sharepoint Server with an average score of 6.9 out of ten. Last year, in 2025 Sharepoint Server had 35 security vulnerabilities published. That is, 101 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 1.07
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 136 | 6.90 |
| 2025 | 35 | 7.97 |
| 2024 | 21 | 7.15 |
| 2023 | 27 | 7.53 |
| 2022 | 29 | 7.76 |
| 2021 | 53 | 7.09 |
| 2020 | 121 | 6.62 |
| 2019 | 48 | 6.78 |
| 2018 | 56 | 5.95 |
It may take a day or so for new Sharepoint Server vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Sharepoint Server Security Vulnerabilities
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69465
8.8 - High
- September 08, 2026
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
AuthZ
Sep 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-69904
3.5 - Low
- September 08, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
SSRF
Sep 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-69636
6.5 - Medium
- September 08, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
SQL Injection
Sep 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-69464
8.8 - High
- September 08, 2026
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Execution with Unnecessary Privileges
Sep 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-69615
3.5 - Low
- September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Sep 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-69417
7.3 - High
- September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Sep 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-69409
6.5 - Medium
- September 08, 2026
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Execution with Unnecessary Privileges
Sep 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-69402
7.3 - High
- September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69282
8.8 - High
- September 08, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Authorization
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69273
8.8 - High
- September 08, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Authorization
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69268
8.8 - High
- September 08, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Authorization
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69804
7.5 - High
- September 08, 2026
Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
TOCTTOU
Sep 2026: Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-69683
6.5 - Medium
- September 08, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
SSRF
Sep 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-69690
4.6 - Medium
- September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Sep 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-69724
8.8 - High
- September 08, 2026
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
AuthZ
Sep 2026: Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-69716
8.8 - High
- September 08, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
SQL Injection
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62839
6.5 - Medium
- August 11, 2026
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Insufficiently Protected Credentials
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62917
4.6 - Medium
- August 11, 2026
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Improper Input Validation
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-58639
6.5 - Medium
- August 11, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
SSRF
Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-70326
8.8 - High
- August 11, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
SSRF
Aug 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-70306
9.3 - Critical
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
XSS
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-66808
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-66805
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-64921
8.8 - High
- August 11, 2026
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Missing Authentication for Critical Function
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64916
4.6 - Medium
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-64901
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64902
4.6 - Medium
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64900
7.3 - High
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64897
4.6 - Medium
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-70355
7.3 - High
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
XSS
Aug 2026: Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2026-70324
8.8 - High
- August 11, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
SSRF
Aug 2026: Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-70321
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-65665
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-65660
8.8 - High
- August 11, 2026
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Code Injection
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-65663
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-65658
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-64922
4.6 - Medium
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-63520
8.1 - High
- August 11, 2026
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Improper Input Validation
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-63516
6.5 - Medium
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-63514
8.8 - High
- August 11, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Marshaling, Unmarshaling
Aug 2026: Microsoft SharePoint Server Tampering Vulnerability
CVE-2026-63512
6.5 - Medium
- August 11, 2026
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
AuthZ
Aug 2026: Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2026-62837
6.5 - Medium
- August 11, 2026
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Relative Path Traversal
Aug 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-62827
8.8 - High
- August 11, 2026
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
authentification
Aug 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62829
4.6 - Medium
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Aug 2026: Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-57105
8 - High
- August 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Jul 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62826
4.6 - Medium
- July 16, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Jul 2026: Microsoft Office Information Disclosure Vulnerability
CVE-2026-55121
5.5 - Medium
- July 14, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Out-of-bounds Read
Jul 2026: Microsoft Office Information Disclosure Vulnerability
CVE-2026-56192
5.5 - Medium
- July 14, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Out-of-bounds Read
Jul 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-56157
5.4 - Medium
- July 14, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Authorization
Jul 2026: Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-55135
4.6 - Medium
- July 14, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Sharepoint Server or by Microsoft? Click the Watch button to subscribe.
