VendorsMicrosoftsharepoint_server2019
Vulnerabilities

Microsoft Sharepoint Server 2019

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

426CVEs
CVE-2024-38094
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2024-07-09 · Analyzed
7.2KEVEPSS 0.509
CVE-2024-38024
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2024-07-09 · Modified
7.2EPSS 0.452
CVE-2024-43464
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2024-09-10 · Analyzed
7.2EPSS 0.363
CVE-2025-29793
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.2EPSS 0.236
CVE-2024-38227
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2024-09-10 · Analyzed
7.2EPSS 0.082
CVE-2021-31966
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-06-08 · Modified
7.2EPSS 0.046
CVE-2024-38228
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2024-09-10 · Analyzed
7.2EPSS 0.042
CVE-2021-42294
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-12-15 · Modified
7.2EPSS 0.022
CVE-2025-21348
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2025-01-14 · Analyzed
7.2EPSS 0.018
CVE-2025-53760
Microsoft SharePoint Elevation of Privilege Vulnerability
Published 2025-08-12 · Analyzed
7.1EPSS 0.165
CVE-2021-31172
Microsoft SharePoint Server Spoofing Vulnerability
Published 2021-05-11 · Modified
7.1EPSS 0.018
CVE-2021-26418
Microsoft SharePoint Server Spoofing Vulnerability
Published 2021-05-11 · Modified
7.1EPSS 0.012
CVE-2025-59235
Microsoft Excel Information Disclosure Vulnerability
Published 2025-10-14 · Analyzed
7.1EPSS 0.007
CVE-2025-54905
Microsoft Word Information Disclosure Vulnerability
Published 2025-09-09 · Analyzed
7.1EPSS 0.006
CVE-2025-59232
Microsoft Excel Information Disclosure Vulnerability
Published 2025-10-14 · Analyzed
7.1EPSS 0.005
CVE-2025-30378
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2025-05-13 · Analyzed
7.0EPSS 0.014
CVE-2026-20943
Microsoft Office Click-To-Run Remote Code Execution Vulnerability
Published 2026-01-13 · Analyzed
7.0EPSS 0.007
CVE-2025-62555
Microsoft Word Remote Code Execution Vulnerability
Published 2025-12-09 · Analyzed
7.0EPSS 0.005
CVE-2025-59221
Microsoft Word Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
7.0EPSS 0.004
CVE-2020-17017
Microsoft SharePoint Information Disclosure Vulnerability
Published 2020-11-11 · Modified
6.8EPSS 0.038
CVE-2023-38177
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2023-11-14 · Modified
6.8EPSS 0.034
CVE-2024-26251
Microsoft SharePoint Server Spoofing Vulnerability
Published 2024-04-09 · Analyzed
6.8EPSS 0.014
CVE-2025-53736
Microsoft Word Information Disclosure Vulnerability
Published 2025-08-12 · Analyzed
6.8EPSS 0.005
CVE-2025-53771
Microsoft SharePoint Server Spoofing Vulnerability
Published 2025-07-20 · Analyzed
6.5EPSS 0.998
CVE-2025-49706
Microsoft SharePoint Server Spoofing Vulnerability
Published 2025-07-08 · Analyzed
6.5KEVEPSS 0.991
CVE-2023-24950
Microsoft SharePoint Server Spoofing Vulnerability
Published 2023-05-09 · Modified
6.5EPSS 0.675
CVE-2019-1443
An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes.The security update addresses the vulnerability by correcting how SharePoint checks file content., aka 'Microsoft SharePoint Information Disclosure Vulnerability'.
Published 2019-11-12 · Modified
6.5EPSS 0.057
CVE-2021-31965
Microsoft SharePoint Server Information Disclosure Vulnerability
Published 2021-06-08 · Modified
6.5EPSS 0.045
CVE-2020-16953
Microsoft SharePoint Information Disclosure Vulnerability
Published 2020-10-16 · Modified
6.5EPSS 0.038
CVE-2020-16948
Microsoft SharePoint Information Disclosure Vulnerability
Published 2020-10-16 · Modified
6.5EPSS 0.038
CVE-2024-49062
Microsoft SharePoint Information Disclosure Vulnerability
Published 2024-12-10 · Analyzed
6.5EPSS 0.032
CVE-2020-16979
Microsoft SharePoint Information Disclosure Vulnerability
Published 2020-11-11 · Modified
6.5EPSS 0.031
CVE-2020-17120
Microsoft SharePoint Information Disclosure Vulnerability
Published 2020-12-09 · Modified
6.5EPSS 0.031
CVE-2021-27052
Microsoft SharePoint Server Information Disclosure Vulnerability
Published 2021-03-11 · Modified
6.5EPSS 0.029
CVE-2021-24071
Microsoft SharePoint Information Disclosure Vulnerability
Published 2021-02-25 · Modified
6.5EPSS 0.027
CVE-2019-1260
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.
Published 2019-09-11 · Modified
6.5EPSS 0.026
CVE-2024-49064
Microsoft SharePoint Information Disclosure Vulnerability
Published 2024-12-10 · Analyzed
6.5EPSS 0.025
CVE-2021-28450
Microsoft SharePoint Denial of Service Vulnerability
Published 2021-04-13 · Modified
6.5EPSS 0.024
CVE-2020-1103
An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF).When users are simultaneously logged in to Microsoft SharePoint Server and visit a malicious web page, the attacker can, through standard browser functionality, induce the browser to invoke search queries as the logged in user, aka 'Microsoft SharePoint Information Disclosure Vulnerability'.
Published 2020-05-21 · Modified
6.5EPSS 0.024
CVE-2021-31173
Microsoft SharePoint Server Information Disclosure Vulnerability
Published 2021-05-11 · Modified
6.5EPSS 0.021
← Prev7 / 11Next →