Skip to content

Vulnerabilities of Microsoft Microsoft SharePoint Enterprise Server 2016

Is your version affected?

CVE Summary Score Published
CVE-2026-55047 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally 5.5 Medium Jul 14, 2026
CVE-2026-55027 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally 5.5 Medium Jul 14, 2026
CVE-2026-55034 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 7.3 High Jul 14, 2026
CVE-2026-55026 Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally 6.2 Medium Jul 14, 2026
CVE-2026-55125 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-55030 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Jul 14, 2026
CVE-2026-55023 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally 5.5 Medium Jul 14, 2026
CVE-2026-55020 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Jul 14, 2026
CVE-2026-55021 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 7.3 High Jul 14, 2026
CVE-2026-55019 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Jul 14, 2026
CVE-2026-55016 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Jul 14, 2026
CVE-2026-58644 Exploited Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 9.8 Critical Jul 14, 2026
CVE-2026-50522 Exploited Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 9.8 Critical Jul 14, 2026
CVE-2026-56164 Exploited Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability 5.3 Medium Jul 14, 2026
CVE-2026-54108 External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing… 6.5 Medium Jul 14, 2026
CVE-2026-48562 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Jun 9, 2026
CVE-2026-48560 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing… 5.4 Medium Jun 9, 2026
CVE-2026-45484 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges… 8.8 High Jun 9, 2026
CVE-2026-45481 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 7.3 High Jun 9, 2026
CVE-2026-47640 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Jun 9, 2026
CVE-2026-45465 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 5.4 Medium Jun 9, 2026
CVE-2026-45464 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 5.4 Medium Jun 9, 2026
CVE-2026-45462 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Jun 9, 2026
CVE-2026-45454 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows… 6.5 Medium Jun 9, 2026
CVE-2026-33113 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 5.4 Medium Jun 9, 2026

Other Microsoft products