Microsoft Microsoft SharePoint Online

Name: Microsoft Microsoft SharePoint Online
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

by severity

2critical5high23medium0low

updated 2026-10-27

vulnerabilities (129)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-65660US	high8.8OT critical	8.19% (95th)	KEV	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63520US	—	0.96% (61st)	Exploit	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-66808US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-66805US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65663US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65658US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64901US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63514US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63516US	—	1.87% (79th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70321US	—	1.69% (77th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65665US	—	1.69% (77th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-50515US	—	1.69% (77th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-62837US	—	1.23% (69th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2025-59245US	—	1.13% (66th)	—	no fix	2025-11-20	—
CVE-2026-70306US	—	1.01% (63rd)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70324US	—	0.94% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64921US	—OT elevated	0.94% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62827US	—	0.94% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65768US	critical9.8	0.94% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65769US	high7.5	0.92% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70328US	—	0.92% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70327US	—	0.92% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62839US	—	0.91% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-58639US	—	0.91% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70332US	—	0.86% (58th)	—	no fix	2026-08-07	3 versions
CVE-2026-70329US	—	0.82% (57th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65807US	—	0.82% (57th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65667US	—OT elevated	0.80% (56th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-70355US	high8.7	0.78% (56th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70326US	—	0.78% (56th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63512US	—OT elevated	0.73% (54th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62896US	—	0.69% (53rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-62882US	—	0.67% (52nd)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64900US	medium5.4	0.65% (51st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62836US	critical10.0	0.65% (51st)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-57105US	medium5.4	0.62% (49th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65767US	high7.6	0.61% (49th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64922US	medium5.4	0.58% (48th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64916US	medium5.4	0.58% (48th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64902US	medium5.4	0.58% (48th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64897US	medium5.4	0.58% (48th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62917US	—	0.58% (48th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63524US	medium5.5	0.54% (45th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70318US	—	0.54% (45th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70314US	—	0.54% (45th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-68813US	—	0.54% (45th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-68808US	—	0.54% (45th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-68802US	—	0.54% (45th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-68799US	—	0.54% (45th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-68797US	—	0.54% (45th)	—	no fix	2026-08-11	≤ vers:unknown/*

showing 50 of 129

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow29 CVEs
CWE-125Out-of-bounds Read24 CVEs
CWE-20Improper Input Validation12 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12 CVEs
CWE-502Deserialization of Untrusted Data11 CVEs
CWE-121Stack-based Buffer Overflow9 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')4 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)128 CVEs
EUEU Vulnerability Database (ENISA)2 CVEs
USMicrosoft MSRC (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan