VendorsMicrosoftsharepoint_server2019
Vulnerabilities

Microsoft Sharepoint Server 2019

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

426CVEs
CVE-2020-17118
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
10.0EPSS 0.038
CVE-2020-1595
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
9.9EPSS 0.020
CVE-2020-1210
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
9.9EPSS 0.019
CVE-2025-53770
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2025-07-20 · Analyzed
9.8KEV1 PoCEPSS 1.000
CVE-2023-29357
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Published 2023-06-13 · Analyzed
9.8KEVEPSS 1.000
CVE-2019-0604
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
Published 2019-03-06 · Analyzed
9.8KEV1 PoCEPSS 0.999
CVE-2023-21716
Microsoft Word Remote Code Execution Vulnerability
Published 2023-02-14 · Modified
9.8EPSS 0.848
CVE-2026-20963
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2026-01-13 · Analyzed
9.8KEVEPSS 0.296
CVE-2026-58644
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8KEVEPSS 0.159
CVE-2020-1025
Microsoft Office Elevation of Privilege Vulnerability
Published 2020-07-14 · Modified
9.8EPSS 0.059
CVE-2019-1205
Microsoft Word Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.8EPSS 0.040
CVE-2026-50522
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2026-07-14 · Analyzed
9.8KEVEPSS 0.030
CVE-2026-56164
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Published 2026-07-14 · Analyzed
9.8KEVEPSS 0.010
CVE-2024-33879
An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows arbitrary file download and deletion via absolute path traversal in the path parameter.
Published 2024-06-24 · Modified
9.8EPSS 0.006
CVE-2019-0585
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server.
Published 2019-01-08 · Modified
9.3EPSS 0.220
CVE-2018-8628
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server.
Published 2018-12-12 · Modified
9.3EPSS 0.159
CVE-2020-0852
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.
Published 2020-03-12 · Modified
9.3EPSS 0.120
CVE-2020-0892
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.
Published 2020-03-12 · Modified
9.3EPSS 0.118
CVE-2020-0980
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
Published 2020-04-15 · Modified
9.3EPSS 0.118
CVE-2019-1035
Microsoft Word Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
9.3EPSS 0.066
CVE-2019-1034
Microsoft Word Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
9.3EPSS 0.049
CVE-2019-1201
Microsoft Word Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.3EPSS 0.049
CVE-2021-1716
Microsoft Word Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
9.3EPSS 0.036
CVE-2021-1715
Microsoft Word Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
9.3EPSS 0.036
CVE-2026-26105
Microsoft SharePoint Server Spoofing Vulnerability
Published 2026-03-10 · Analyzed
9.3EPSS 0.011
CVE-2026-70306
Microsoft Office SharePoint Spoofing Vulnerability
Published 2026-08-11 · Analyzed
9.3EPSS 0.010
CVE-2026-55040
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Published 2026-07-14 · Analyzed
9.1KEVEPSS 0.175
CVE-2021-1707
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
9.0EPSS 0.036
CVE-2022-21837
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
9.0EPSS 0.030
CVE-2020-1523
Microsoft SharePoint Server Tampering Vulnerability
Published 2020-09-11 · Modified
8.9EPSS 0.022
CVE-2025-49704
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
8.8KEVEPSS 1.000
CVE-2022-44690
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-12-13 · Modified
8.8EPSS 0.821
CVE-2022-38053
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-10-11 · Modified
8.8EPSS 0.764
CVE-2020-1181
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
Published 2020-06-09 · Modified
8.8EPSS 0.693
CVE-2023-21742
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2023-01-10 · Modified
8.8EPSS 0.558
CVE-2022-35823
Microsoft SharePoint Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
8.8EPSS 0.536
CVE-2024-38018
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2024-09-10 · Analyzed
8.8EPSS 0.512
CVE-2021-28474
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-05-11 · Modified
8.8EPSS 0.508
CVE-2022-37961
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
8.8EPSS 0.507
CVE-2021-40487
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
8.8EPSS 0.482
1 / 11Next →