Total
642 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2020-1024 | 1 Microsoft | 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server | 2026-08-19 | 6.5 MEDIUM | 8.8 HIGH |
| A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint. The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages. | |||||
| CVE-2020-1023 | 1 Microsoft | 3 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Server | 2026-08-19 | 6.5 MEDIUM | 8.8 HIGH |
| A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint. The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages. | |||||
| CVE-2026-64900 | 1 Microsoft | 1 Sharepoint Server | 2026-08-19 | N/A | 7.3 HIGH |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-55040 | 1 Microsoft | 1 Sharepoint Server | 2026-08-19 | N/A | 9.1 CRITICAL |
| Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. | |||||
| CVE-2026-70306 | 1 Microsoft | 1 Sharepoint Server | 2026-08-16 | N/A | 9.3 CRITICAL |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-62917 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 4.6 MEDIUM |
| Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-62839 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 6.5 MEDIUM |
| Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-70355 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 7.3 HIGH |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-70324 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 8.8 HIGH |
| Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-66808 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 8.8 HIGH |
| Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-63520 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 8.1 HIGH |
| Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-64921 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 8.8 HIGH |
| Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-64922 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 4.6 MEDIUM |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-65658 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 8.8 HIGH |
| Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-65665 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 8.8 HIGH |
| Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-65663 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 8.8 HIGH |
| Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-64916 | 1 Microsoft | 1 Sharepoint Server | 2026-08-13 | N/A | 4.6 MEDIUM |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-58639 | 1 Microsoft | 1 Sharepoint Server | 2026-08-12 | N/A | 6.5 MEDIUM |
| Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-63516 | 1 Microsoft | 1 Sharepoint Server | 2026-08-12 | N/A | 6.5 MEDIUM |
| Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-63512 | 1 Microsoft | 1 Sharepoint Server | 2026-08-12 | N/A | 6.5 MEDIUM |
| Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. | |||||