Microsoft SharePoint Enterprise Server vulnerabilities

256 CVEs affecting Microsoft SharePoint Enterprise Server, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-54905, published 2025-09-09.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-0604: Microsoft SharePoint Remote Code Execution Vulnerability, published 2019-03-05. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 99.9% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution…
• CVE-2025-49706: Microsoft SharePoint Improper Authentication Vulnerability, published 2025-07-08. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2025-07-22. EPSS: 99.1% chance of exploitation in the next 30 days. Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
• CVE-2020-1147: Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability, published 2020-07-14. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 94% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework,…
• CVE-2023-24955: Microsoft SharePoint Server Code Injection Vulnerability, published 2023-05-09. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2024-03-26. EPSS: 85% chance of exploitation in the next 30 days. Microsoft SharePoint Server Remote Code Execution Vulnerability
• CVE-2017-11826: Microsoft Office Remote Code Execution Vulnerability, published 2017-10-13. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 81.3% chance of exploitation in the next 30 days. Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation…
• CVE-2023-21716, published 2023-02-14. Critical severity, CVSS 9.8. EPSS: 84.8% chance of exploitation in the next 30 days. Microsoft Word Remote Code Execution Vulnerability
• CVE-2022-38053, published 2022-10-11. High severity, CVSS 8.8. EPSS: 76.4% chance of exploitation in the next 30 days. Microsoft SharePoint Server Remote Code Execution Vulnerability
• CVE-2020-16952, published 2020-10-16. High severity, CVSS 8.6. EPSS: 71.1% chance of exploitation in the next 30 days. <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the…
• CVE-2020-1181, published 2020-06-09. High severity, CVSS 8.8. EPSS: 69.3% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code…
• CVE-2023-24950, published 2023-05-09. Medium severity, CVSS 6.5. EPSS: 67.5% chance of exploitation in the next 30 days. Microsoft SharePoint Server Spoofing Vulnerability

Latest

• CVE-2025-54905, published 2025-09-09. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53736, published 2025-08-12. Medium severity, CVSS 6.2. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53733, published 2025-08-12. High severity, CVSS 8.4. EPSS: 0.5% chance of exploitation in the next 30 days. Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-47994, published 2025-07-08. High severity, CVSS 8.6. EPSS: 3.3% chance of exploitation in the next 30 days. Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.
• CVE-2025-47172, published 2025-06-10. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• CVE-2025-47169, published 2025-06-10. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-47168, published 2025-06-10. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-47166, published 2025-06-10. High severity, CVSS 8.8. EPSS: 21.6% chance of exploitation in the next 30 days. Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• CVE-2025-47163, published 2025-06-10. High severity, CVSS 8.8. EPSS: 20.9% chance of exploitation in the next 30 days. Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.