microsoft sharepoint server
productUScpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
6critical173high257medium26low
updated 2026-10-27
| ID | severity CVSS base severity and score (0–10). | EPSS FIRST.org probability this is exploited in the next 30 days, with its percentile rank among all CVEs. | exploitable On CISA's Known Exploited Vulnerabilities list, or a public exploit is on file. | patched Whether a fixed version is on file for an affecting range. | published | affected |
|---|
| CVE-2025-53770US | —OT critical | 100.0% (100th) | KEV | ✓16.0.18526.20508 | 2025-07-20 | 3 versions |
| CVE-2025-49704US | —OT critical | 100.0% (100th) | KEV | ✗no fix | 2025-07-08 | 2 versions |
| CVE-2023-29357US | —OT critical | 100.0% (100th) | KEV | ✗no fix | 2023-06-14 | = 2019 |
| CVE-2019-0604US | critical9.8OT critical | 99.9% (100th) | KEV | ✗no fix | 2019-03-05 | 2 versions |
| CVE-2025-49706US | —OT critical | 99.1% (100th) | KEV | ✓16.0.18526.20424 | 2025-07-08 | 2 versions |
| CVE-2015-1641US | high7.8OT critical | 97.2% (100th) | KEV | ✗no fix | 2015-04-14 | 2 versions |
| CVE-2020-1147US | high7.8OT critical | 94.0% (100th) | KEV | ✗no fix | 2020-07-14 | 2 versions |
| CVE-2023-24955US | —OT critical | 85.0% (100th) | KEV | ✗no fix | 2023-05-09 | 2 versions |
| CVE-2017-11826US | high7.8OT critical | 81.3% (100th) | KEV | ✗no fix | 2017-10-13 | 2 versions |
| CVE-2026-45659US | —OT critical | 80.2% (100th) | KEV | ✓16.0.19725.20280 | 2026-05-22 | 3 versions |
| CVE-2014-1761US | high9.3OT critical | 77.7% (100th) | KEV | ✗no fix | 2014-03-25 | 2 versions |
| CVE-2026-55040US | —OT critical | 69.5% (99th) | KEV | ✓16.0.19725.20434 | 2026-07-14 | 3 versions |
| CVE-2026-32201US | medium6.5OT critical | 43.4% (99th) | KEV | ✓16.0.19725.20210 | 2026-04-14 | 3 versions |
| CVE-2026-65660US | high8.8OT critical | 8.19% (95th) | KEV | ✓16.0.19725.20522 | 2026-08-11 | 3 versions |
| CVE-2026-50522US | —OT critical | 3.04% (87th) | KEV | ✓16.0.19725.20434 | 2026-07-14 | 3 versions |
| CVE-2026-56164US | critical9.8OT critical | 1.01% (63rd) | KEV | ✓16.0.19725.20434 | 2026-07-14 | 3 versions |
| CVE-2012-2539US | high9.3OT critical | 53.0% (99th) | KEV | ✗no fix | 2012-12-12 | = 2010 |
| CVE-2024-38094US | —OT critical | 50.9% (99th) | KEV | ✗no fix | 2024-07-09 | 3 versions |
| CVE-2026-20963US | —OT critical | 29.2% (98th) | KEV | ✓16.0.19127.20442 | 2026-01-13 | 3 versions |
| CVE-2026-58644US | —OT critical | 15.9% (97th) | KEV | ✓16.0.19725.20434 | 2026-07-14 | 3 versions |
| CVE-2025-53771US | — | 99.9% (100th) | Exploit | ✓16.0.18526.20508 | 2025-07-20 | 3 versions |
| CVE-2010-3964US | high7.5 | 94.2% (100th) | Exploit | ✗no fix | 2010-12-16 | = 2007 |
| CVE-2023-21716US | critical9.8 | 84.8% (100th) | Exploit | ✗no fix | 2023-02-14 | 2 versions |
| CVE-2020-16952US | medium6.8 | 71.1% (99th) | Exploit | ✗no fix | 2020-10-16 | = 2019 |
| CVE-2024-30043US | high7.5 | 56.1% (99th) | Exploit | ✓16.0.17328.20292 | 2024-05-14 | 3 versions |
| CVE-2023-21742US | — | 55.8% (99th) | Exploit | ✗no fix | 2023-01-10 | 4 versions |
| CVE-2018-8284US | high8.1 | 46.0% (99th) | Exploit | ✗no fix | 2018-07-11 | 2 versions |
| CVE-2015-2468US | high9.3 | 43.4% (99th) | Exploit | ✗no fix | 2015-08-15 | 2 versions |
| CVE-2011-1892US | medium4.0 | 41.4% (99th) | Exploit | ✗no fix | 2011-09-15 | 2 versions |
| CVE-2007-2581US | medium4.3 | 36.2% (98th) | Exploit | ✗no fix | 2007-05-09 | = 2007 |
| CVE-2009-3830US | medium5.0 | 32.6% (98th) | Exploit | ✗no fix | 2009-10-30 | = 2007 |
| CVE-2013-0007US | high9.3 | 31.6% (98th) | Exploit | ✗no fix | 2013-01-09 | = 2007 |
| CVE-2015-0064US | high9.3 | 30.0% (98th) | Exploit | ✗no fix | 2015-02-11 | = 2010 |
| CVE-2021-31181US | medium6.5 | 29.0% (98th) | Exploit | ✗no fix | 2021-05-11 | = 2019 |
| CVE-2010-0817US | medium4.3 | 28.7% (98th) | Exploit | ✗no fix | 2010-04-29 | = 2007 |
| CVE-2010-3324US | medium4.3 | 25.0% (98th) | Exploit | ✗no fix | 2010-09-17 | = 2007 |
| CVE-2013-3179US | medium4.3 | 22.3% (98th) | Exploit | ✗no fix | 2013-09-11 | 2 versions |
| CVE-2025-54897US | — | 21.7% (98th) | Exploit | ✓16.0.19127.20100 | 2025-09-09 | 3 versions |
| CVE-2025-47166US | — | 21.6% (98th) | Exploit | ✓16.0.18526.20396 | 2025-06-10 | 2 versions |
| CVE-2008-1888US | medium4.3 | 8.02% (95th) | Exploit | ✗no fix | 2008-04-18 | = 2.0 |
| CVE-2023-28288US | — | 6.23% (94th) | Exploit | ✗no fix | 2023-04-11 | 4 versions |
| CVE-2019-1006US | high7.5 | 6.07% (93rd) | Exploit | ✗no fix | 2019-07-15 | = 2019 |
| CVE-2020-1102US | high8.8 | 5.22% (92nd) | Exploit | ✗no fix | 2020-05-21 | = 2019 |
| CVE-2021-31950US | medium5.5 | 4.56% (92nd) | Exploit | ✗no fix | 2021-06-08 | 2 versions |
| CVE-2026-26114US | — | 3.15% (88th) | Exploit | ✗no fix | 2026-03-10 | 2 versions |
| CVE-2026-63520US | — | 0.96% (61st) | Exploit | ✓16.0.19725.20522 | 2026-08-11 | 3 versions |
| CVE-2022-44690US | — | 82.1% (100th) | — | ✗no fix | 2022-12-13 | 4 versions |
| CVE-2024-30044US | — | 80.8% (100th) | — | ✓16.0.17328.20292 | 2024-05-14 | 3 versions |
| CVE-2022-38053US | — | 76.4% (100th) | — | ✗no fix | 2022-10-11 | 2 versions |
| CVE-2013-0081US | medium5.0 | 76.2% (100th) | — | ✗no fix | 2013-09-11 | 3 versions |
showing 50 of 646