Skip to content

Vulnerabilities of Microsoft Microsoft SharePoint Server Subscription Edition

Is your version affected?

CVE Summary Score Published
CVE-2025-62204 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.0 High Nov 11, 2025
CVE-2025-59237 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 High Oct 14, 2025
CVE-2025-59228 Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network 8.8 High Oct 14, 2025
CVE-2025-54897 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 High Sep 9, 2025
CVE-2025-53760 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges… 7.1 High Aug 12, 2025
CVE-2025-53771 Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a… 6.5 Medium Jul 20, 2025
CVE-2025-53770 Exploited Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 9.8 Critical Jul 20, 2025
CVE-2025-49706 Exploited Microsoft SharePoint Improper Authentication Vulnerability 6.5 Medium Jul 8, 2025
CVE-2025-49701 Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network 8.8 High Jul 8, 2025
CVE-2025-47172 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint… 8.8 High Jun 10, 2025
CVE-2025-47166 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 High Jun 10, 2025
CVE-2025-47163 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 High Jun 10, 2025
CVE-2025-30384 Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally 7.4 High May 13, 2025
CVE-2025-30382 Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally 7.8 High May 13, 2025
CVE-2025-30378 Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally 7.0 High May 13, 2025
CVE-2025-29976 Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally 7.8 High May 13, 2025
CVE-2025-29794 Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network 8.8 High Apr 8, 2025
CVE-2025-29793 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 7.2 High Apr 8, 2025
CVE-2025-21400 Microsoft SharePoint Server Remote Code Execution Vulnerability 8.0 High Feb 11, 2025
CVE-2025-21393 Microsoft SharePoint Server Spoofing Vulnerability 6.3 Medium Jan 14, 2025
CVE-2025-21348 Microsoft SharePoint Server Remote Code Execution Vulnerability 7.2 High Jan 14, 2025
CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability 7.8 High Jan 14, 2025
CVE-2024-49062 Microsoft SharePoint Information Disclosure Vulnerability 6.5 Medium Dec 10, 2024
CVE-2024-49070 Microsoft SharePoint Remote Code Execution Vulnerability 7.4 High Dec 10, 2024
CVE-2024-49068 Microsoft SharePoint Elevation of Privilege Vulnerability 8.2 High Dec 10, 2024

Other Microsoft products