Aller au contenu

Vulnérabilités de Microsoft Microsoft SharePoint Server 2019

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-45659 Exploitée Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability 8.8 Élevée 22 mai 2026
CVE-2026-40367 Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker… 8.4 Élevée 12 mai 2026
CVE-2026-40365 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 Élevée 12 mai 2026
CVE-2026-40357 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 Élevée 12 mai 2026
CVE-2026-33112 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 Élevée 12 mai 2026
CVE-2026-33110 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 Élevée 12 mai 2026
CVE-2026-40368 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.0 Élevée 12 mai 2026
CVE-2026-35439 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 Élevée 12 mai 2026
CVE-2026-32201 Exploitée Microsoft SharePoint Server Improper Input Validation Vulnerability 6.5 Moyenne 14 avr. 2026
CVE-2026-20945 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Moyenne 14 avr. 2026
CVE-2026-26106 Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network 8.8 Élevée 10 mars 2026
CVE-2026-26113 Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 Élevée 10 mars 2026
CVE-2026-26114 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a… 8.8 Élevée 10 mars 2026
CVE-2026-26105 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 8.1 Élevée 10 mars 2026
CVE-2026-21511 Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a… 7.5 Élevée 10 févr. 2026
CVE-2026-21260 Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker… 7.5 Élevée 10 févr. 2026
CVE-2026-20958 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose… 5.4 Moyenne 13 janv. 2026
CVE-2026-20948 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 Élevée 13 janv. 2026
CVE-2026-20947 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint… 8.8 Élevée 13 janv. 2026
CVE-2026-20959 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint… 4.6 Moyenne 13 janv. 2026
CVE-2026-20963 Exploitée Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 9.8 Critique 13 janv. 2026
CVE-2026-20951 Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally 7.8 Élevée 13 janv. 2026
CVE-2026-20943 Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally 7.0 Élevée 13 janv. 2026
CVE-2025-62559 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 Élevée 9 déc. 2025
CVE-2025-62558 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 Élevée 9 déc. 2025

Autres produits Microsoft