Skip to content

Vulnerabilities of Microsoft Microsoft SharePoint Server 2019

Is your version affected?

CVE Summary Score Published
CVE-2026-63514 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 High Aug 11, 2026
CVE-2026-62827 Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a… 8.8 High Aug 11, 2026
CVE-2026-57105 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 8.0 High Aug 11, 2026
CVE-2026-62829 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Aug 11, 2026
CVE-2026-62826 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Jul 16, 2026
CVE-2026-55121 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally 5.5 Medium Jul 14, 2026
CVE-2026-58277 Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network 8.8 High Jul 14, 2026
CVE-2026-56192 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally 5.5 Medium Jul 14, 2026
CVE-2026-56157 Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network 5.4 Medium Jul 14, 2026
CVE-2026-55135 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Medium Jul 14, 2026
CVE-2026-55052 Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network 8.8 High Jul 14, 2026
CVE-2026-55128 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-55130 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-55142 Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally 5.5 Medium Jul 14, 2026
CVE-2026-55040 Exploited Microsoft SharePoint Weak Authentication Vulnerability 9.1 Critical Jul 14, 2026
CVE-2026-55134 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-55126 Microsoft SharePoint Server Spoofing Vulnerability 7.3 High Jul 14, 2026
CVE-2026-55051 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose… 6.5 Medium Jul 14, 2026
CVE-2026-55132 Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-55038 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-55055 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-55035 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally 5.5 Medium Jul 14, 2026
CVE-2026-55127 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026
CVE-2026-55124 Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose… 5.5 Medium Jul 14, 2026
CVE-2026-55033 Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Jul 14, 2026

Other Microsoft products