Filtered by vendor Microsoft Subscriptions
Filtered by product Sharepoint Server Subscriptions
Total 459 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-54905 1 Microsoft 6 365 Apps, Office, Office Long Term Servicing Channel and 3 more 2025-09-12 7.1 High
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-54906 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-09-12 7.8 High
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-54897 1 Microsoft 1 Sharepoint Server 2025-09-12 8.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-30384 1 Microsoft 1 Sharepoint Server 2025-09-10 7.4 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
CVE-2025-30382 1 Microsoft 1 Sharepoint Server 2025-09-10 7.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
CVE-2025-30378 1 Microsoft 1 Sharepoint Server 2025-09-10 7 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
CVE-2025-29976 1 Microsoft 1 Sharepoint Server 2025-09-10 7.8 High
Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.
CVE-2025-49712 1 Microsoft 3 Sharepoint Enterprise Server 2016, Sharepoint Server, Sharepoint Server 2010 2025-09-09 8.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-53736 1 Microsoft 15 365, 365 Apps, Office and 12 more 2025-09-09 6.8 Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-53733 1 Microsoft 14 365, 365 Apps, Office and 11 more 2025-09-09 8.4 High
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53760 1 Microsoft 3 Sharepoint Enterprise Server 2016, Sharepoint Server, Sharepoint Server 2019 2025-09-09 7.1 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2025-21393 1 Microsoft 1 Sharepoint Server 2025-09-09 6.3 Medium
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2025-21348 1 Microsoft 1 Sharepoint Server 2025-09-09 7.2 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-21344 1 Microsoft 1 Sharepoint Server 2025-09-09 7.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2020-17122 1 Microsoft 3 Office, Office Web Apps, Sharepoint Server 2025-08-28 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17121 1 Microsoft 2 Sharepoint Foundation, Sharepoint Server 2025-08-28 8.8 High
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2020-17120 1 Microsoft 2 Sharepoint Foundation, Sharepoint Server 2025-08-28 5.3 Medium
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2020-17118 1 Microsoft 2 Sharepoint Foundation, Sharepoint Server 2025-08-28 8.1 High
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2020-17115 1 Microsoft 2 Sharepoint Foundation, Sharepoint Server 2025-08-28 8 High
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17089 1 Microsoft 2 Sharepoint Foundation, Sharepoint Server 2025-08-28 7.1 High
Microsoft SharePoint Elevation of Privilege Vulnerability