VendorsMicrosoftsharepoint_server2016
Vulnerabilities

Microsoft Sharepoint Server 2016

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

235CVEs
CVE-2020-17118
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
10.0EPSS 0.038
CVE-2025-53770
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2025-07-20 · Analyzed
9.8KEV1 PoCEPSS 1.000
CVE-2026-20963
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2026-01-13 · Analyzed
9.8KEVEPSS 0.296
CVE-2026-58644
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8KEVEPSS 0.159
CVE-2026-50522
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8KEVEPSS 0.030
CVE-2026-56164
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Published 2026-07-14 · Analyzed
9.8KEVEPSS 0.010
CVE-2018-0792
Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0794.
Published 2018-01-10 · Modified
9.3EPSS 0.283
CVE-2016-3282
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, SharePoint Server 2016, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Published 2016-07-13 · Modified
9.3EPSS 0.263
CVE-2017-8743
A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742.
Published 2017-09-13 · Modified
9.3EPSS 0.221
CVE-2017-8742
A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft SharePoint Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Web Apps 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8743.
Published 2017-09-13 · Modified
9.3EPSS 0.221
CVE-2019-0585
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server.
Published 2019-01-08 · Modified
9.3EPSS 0.220
CVE-2018-8161
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Word, Word, Microsoft Office, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8157, CVE-2018-8158.
Published 2018-05-09 · Modified
9.3EPSS 0.217
CVE-2017-8511
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.
Published 2017-06-15 · Modified
9.3EPSS 0.206
CVE-2017-0254
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word 2013 RT SP1, Word 2013 SP1, Word Automation Services on Microsoft SharePoint Server 2013 SP1, Office Word Viewer, SharePoint Enterprise Server 2016, and Word 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-0264 and CVE-2017-0265.
Published 2017-05-12 · Modified
9.3EPSS 0.198
CVE-2017-8509
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.
Published 2017-06-15 · Modified
9.3EPSS 0.182
CVE-2017-0281
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word 2016, and Skype for Business 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0262.
Published 2017-05-12 · Modified
9.3EPSS 0.158
CVE-2026-26105
Microsoft SharePoint Server Spoofing Vulnerability
Published 2026-03-10 · Analyzed
9.3EPSS 0.011
CVE-2026-70306
Microsoft Office SharePoint Spoofing Vulnerability
Published 2026-08-11 · Analyzed
9.3EPSS 0.010
CVE-2026-55040
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Published 2026-07-14 · Analyzed
9.1KEVEPSS 0.175
CVE-2022-21837
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
9.0EPSS 0.030
CVE-2025-49704
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
8.8KEVEPSS 1.000
CVE-2022-44690
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-12-13 · Modified
8.8EPSS 0.821
CVE-2023-21742
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2023-01-10 · Modified
8.8EPSS 0.558
CVE-2024-38018
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2024-09-10 · Analyzed
8.8EPSS 0.512
CVE-2021-28474
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-05-11 · Modified
8.8EPSS 0.508
CVE-2023-33157
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2023-07-11 · Modified
8.8EPSS 0.382
CVE-2024-21318
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2024-01-09 · Modified
8.8EPSS 0.308
CVE-2025-49712
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2025-08-12 · Analyzed
8.8EPSS 0.192
CVE-2025-54897
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2025-09-09 · Analyzed
8.8EPSS 0.191
CVE-2026-20947
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2026-01-13 · Analyzed
8.8EPSS 0.188
CVE-2021-27076
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
8.8EPSS 0.152
CVE-2022-30157
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-06-15 · Modified
8.8EPSS 0.070
CVE-2021-34467
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-07-16 · Modified
8.8EPSS 0.066
CVE-2017-8569
Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability".
Published 2017-07-11 · Modified
8.8EPSS 0.054
CVE-2021-34520
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-07-14 · Modified
8.8EPSS 0.044
CVE-2023-33160
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2023-07-11 · Modified
8.8EPSS 0.043
CVE-2020-17061
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-11-11 · Modified
8.8EPSS 0.043
CVE-2022-30158
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-06-15 · Modified
8.8EPSS 0.034
CVE-2022-21840
Microsoft Office Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
8.8EPSS 0.031
CVE-2020-17121
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
8.8EPSS 0.030
1 / 6Next →