Microsoft Microsoft SharePoint Enterprise Server 2016

Name: Microsoft Microsoft SharePoint Enterprise Server 2016
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

17critical219high234medium21low

updated 2026-10-26

vulnerabilities (924)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-53770US	—OT critical	100.0% (100th)	KEV	16.0.5513.1001	2025-07-20	2 versions
CVE-2025-49704US	—OT critical	100.0% (100th)	KEV	16.0.5508.1000	2025-07-08	2 versions
CVE-2025-49706US	—OT critical	99.1% (100th)	KEV	16.0.5508.1000	2025-07-08	2 versions
CVE-2023-24955US	—OT critical	85.0% (100th)	KEV	16.0.5395.1000	2023-05-09	16.0.0 → 16.0.5395.1000
CVE-2026-55040US	—OT critical	69.5% (99th)	KEV	16.0.5561.1001	2026-07-14	4 versions
CVE-2026-32201US	medium6.5OT critical	43.4% (99th)	KEV	16.0.5548.1003	2026-04-14	4 versions
CVE-2026-50522US	—OT critical	3.04% (87th)	KEV	16.0.5561.1001	2026-07-14	4 versions
CVE-2026-45659US	—OT critical	2.70% (86th)	KEV	16.0.5552.1002	2026-05-22	3 versions
CVE-2026-65660US	high8.8OT critical	2.10% (82nd)	KEV	16.0.5565.1001	2026-08-11	4 versions
CVE-2026-21514US	—OT critical	1.59% (75th)	KEV	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-56164US	critical9.8OT critical	1.01% (63rd)	KEV	16.0.5561.1001	2026-07-14	4 versions
CVE-2024-38094US	—OT critical	50.9% (99th)	KEV	16.0.5456.1000	2024-07-09	16.0.0 → 16.0.5456.1000
CVE-2026-20963US	—OT critical	29.2% (98th)	KEV	16.0.5535.1001	2026-01-13	4 versions
CVE-2026-58644US	—OT critical	15.9% (97th)	KEV	16.0.5556.1005	2026-07-14	4 versions
CVE-2026-96951US	high8.8OT critical	1.51% (74th)	KEV	no fix	2026-10-13	≤ vers:unknown/*
CVE-2025-53771US	—	99.9% (100th)	Exploit	16.0.5513.1001	2025-07-20	2 versions
CVE-2023-21716US	critical9.8	84.8% (100th)	Exploit	16.0.5383.1000	2023-02-14	16.0.0 → 16.0.5383.1000
CVE-2020-16952US	medium6.8	71.1% (99th)	Exploit	publication	2020-10-16	16.0.0 → publication
CVE-2024-30043US	high7.5	56.1% (99th)	Exploit	16.0.5448.1000	2024-05-14	16.0.0 → 16.0.5448.1000
CVE-2023-21742US	—	55.8% (99th)	Exploit	16.0.5378.1000	2023-01-10	16.0.0 → 16.0.5378.1000
CVE-2021-31181US	medium6.5	29.0% (98th)	Exploit	16.0.5161.1000	2021-05-11	16.0.0 → 16.0.5161.1000
CVE-2025-54897US	—	21.7% (98th)	Exploit	16.0.5517.1000	2025-09-09	4 versions
CVE-2025-47166US	—	21.6% (98th)	Exploit	16.0.5504.1001	2025-06-10	2 versions
CVE-2023-28288US	—	6.23% (94th)	Exploit	16.0.5391.1000	2023-04-11	16.0.0 → 16.0.5391.1000
CVE-2021-31950US	medium5.5	4.56% (92nd)	Exploit	16.0.5173.1000	2021-06-08	16.0.0 → 16.0.5173.1000
CVE-2026-26114US	—	2.55% (85th)	Exploit	16.0.5543.1000	2026-03-10	4 versions
CVE-2025-47175US	—	2.39% (84th)	Exploit	no fix	2025-06-10	≤ vers:unknown/16.0.0\|<16.0.5504.1001
CVE-2025-47165US	—	2.19% (82nd)	Exploit	no fix	2025-06-10	≤ vers:unknown/16.0.0\|<16.0.5504.1001
CVE-2025-47171US	—	1.68% (77th)	Exploit	no fix	2025-06-10	≤ vers:unknown/16.0.0\|<16.0.5504.1001
CVE-2025-47957US	—	1.31% (71st)	Exploit	no fix	2025-06-10	≤ vers:unknown/16.0.0\|<16.0.5504.1001
CVE-2026-63520US	—	0.96% (61st)	Exploit	16.0.5565.1001	2026-08-11	4 versions
CVE-2025-47176US	—	0.75% (54th)	Exploit	no fix	2025-06-10	≤ vers:unknown/16.0.0\|<16.0.5504.1001
CVE-2024-30044US	—	84.0% (100th)	—	16.0.5448.1000	2024-05-14	16.0.0 → 16.0.5448.1000
CVE-2022-44690US	—	82.1% (100th)	—	16.0.5373.1000	2022-12-13	16.0.0 → 16.0.5373.1000
CVE-2022-38053US	—	76.4% (100th)	—	16.0.5365.1000	2022-10-11	16.0.0 → 16.0.5365.1000
CVE-2023-24950US	—	67.5% (99th)	—	16.0.5395.1000	2023-05-09	16.0.0 → 16.0.5395.1000
CVE-2022-35823US	—	53.8% (99th)	—	16.0.5361.1002	2022-09-13	16.0.0 → 16.0.5361.1002
CVE-2024-38023US	—	52.9% (99th)	—	16.0.5456.1000	2024-07-09	16.0.0 → 16.0.5456.1000
CVE-2024-38018US	—	51.2% (99th)	—	16.0.5465.1001	2024-09-10	16.0.0 → 16.0.5465.1001
CVE-2022-37961US	—	50.9% (99th)	—	16.0.5361.1002	2022-09-13	16.0.0 → 16.0.5361.1002
CVE-2021-28474US	medium6.5	50.8% (99th)	—	16.0.5161.1000	2021-05-11	16.0.0 → 16.0.5161.1000
CVE-2021-40487US	medium6.5	48.2% (99th)	—	16.0.5227.1000	2021-10-13	16.0.0 → 16.0.5227.1000
CVE-2024-38024US	—	45.2% (99th)	—	16.0.5456.1000	2024-07-09	16.0.0 → 16.0.5456.1000
CVE-2023-33157US	—	38.2% (99th)	—	16.0.5404.1000	2023-07-11	16.0.0 → 16.0.5404.1000
CVE-2024-43464US	—	36.3% (98th)	—	16.0.5465.1001	2024-09-10	16.0.0 → 16.0.5465.1001
CVE-2025-21400US	—	34.2% (98th)	—	16.0.5487.1000	2025-02-11	16.0.0 → 16.0.5487.1000
CVE-2024-21318US	—	30.8% (98th)	—	16.0.5430.1000	2024-01-09	16.0.0 → 16.0.5430.1000
CVE-2025-29793US	—	23.6% (98th)	—	16.0.5495.1002	2025-04-08	16.0.0 → 16.0.5495.1002
CVE-2025-47163US	—	20.9% (98th)	—	16.0.5504.1001	2025-06-10	2 versions
CVE-2025-49712US	—	20.7% (98th)	—	16.0.5513.1002	2025-08-12	16.0.0 → 16.0.5513.1002

showing 50 of 924

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow175 CVEs
CWE-125Out-of-bounds Read124 CVEs
CWE-416Use After Free107 CVEs
CWE-20Improper Input Validation84 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')74 CVEs
CWE-502Deserialization of Untrusted Data55 CVEs
CWE-121Stack-based Buffer Overflow34 CVEs
CWE-190Integer Overflow or Wraparound28 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)738 CVEs
EUEU Vulnerability Database (ENISA)323 CVEs
USMicrosoft MSRC (CSAF)126 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan