Security
SharePoint Server security updates
What Microsoft fixed in SharePoint Server each month, as its Security Response Center publishes it: each vulnerability, the versions it affects, whether Microsoft marks it exploited, and the update that fixes it.
Read from MSRC on
MSRC's newest document, November 2026 Early Security Updates, released 4 November 2026, names no SharePoint Server update yet.
38listed against SharePoint Server in October 20260marked exploited in October 20264marked exploited by MSRC since January 202435monthly documents read, from January 2024
Every update since January 2024
Newest first. SE is Subscription Edition. Search a CVE, a KB, a version or an impact.| Month | CVE | Vulnerability | Versions | Impact | Severity | Exploited | Fix |
|---|---|---|---|---|---|---|---|
| 2026-10 | CVE-2026-102859 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-102860 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-102861 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-102862 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-102863 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-102864 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-102865 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-102866 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Critical | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-105013 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-105713 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-105719 | Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-105720 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-108452 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-69943 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-70202 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-70217 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-70246 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-70251 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-70259 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-70266 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-70267 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-70298 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-85900 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-85932 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88155 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88163 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88164 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88166 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88198 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88200 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88204 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88206 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88208 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-88209 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-96044 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-97755 | Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft Office Excel | SE | Remote Code Execution | Critical | No | KB5002927 SE 16.0.20326.20190 |
| 2026-10 | CVE-2026-97782 | Microsoft Office SharePoint Tampering VulnerabilityMicrosoft Office SharePoint | SE | Tampering | Important | No | KB5002893 SE 16.0.19725.20522 |
| 2026-10 | CVE-2026-97783 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-09 | CVE-2026-69268 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69273 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002908 SE 16.0.20326.20082 |
| 2026-09 | CVE-2026-69282 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69402 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69409 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69417 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69464 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69465 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002908 SE 16.0.20326.20074 |
| 2026-09 | CVE-2026-69615 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69636 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002908 SE 16.0.20326.20082 |
| 2026-09 | CVE-2026-69683 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002908 SE 16.0.20326.20082 |
| 2026-09 | CVE-2026-69690 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69716 | Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002908 SE 16.0.20326.20094 |
| 2026-09 | CVE-2026-69724 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69804 | Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002908 SE 16.0.20326.20090 |
| 2026-09 | CVE-2026-69904 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE | Information Disclosure | Important | No | KB5002908 SE 16.0.20326.20082 |
| 2026-08 | CVE-2026-57105 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE2019 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-58639 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-62827 | Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Critical | No | |
| 2026-08 | CVE-2026-62829 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE2019 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-62837 | Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE20192016 | Information Disclosure | Important | No | |
| 2026-08 | CVE-2026-62839 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-62917 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-63512 | Microsoft SharePoint Server Tampering VulnerabilityMicrosoft Office SharePoint | SE20192016 | Tampering | Important | No | |
| 2026-08 | CVE-2026-63514 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-08 | CVE-2026-63516 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-63520 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-08 | CVE-2026-64897 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-64900 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-64901 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-08 | CVE-2026-64902 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-64916 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-64921 | Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Critical | No | |
| 2026-08 | CVE-2026-64922 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-65658 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-08 | CVE-2026-65660 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-08 | CVE-2026-65663 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-08 | CVE-2026-65665 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE2019 | Remote Code Execution | Critical | No | |
| 2026-08 | CVE-2026-66805 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002927 SE 16.0.20326.20190 |
| 2026-08 | CVE-2026-66808 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-08 | CVE-2026-70306 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-08 | CVE-2026-70321 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE | Remote Code Execution | Important | No | KB5002893 SE 16.0.19725.20522 |
| 2026-08 | CVE-2026-70324 | Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Important | No | |
| 2026-08 | CVE-2026-70326 | Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE | Elevation of Privilege | Important | No | KB5002893 SE 16.0.19725.20522 |
| 2026-08 | CVE-2026-70355 | Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE2019 | Elevation of Privilege | Important | No | |
| 2026-07 | CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Moderate | Exploited | |
| 2026-07 | CVE-2026-58644 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Critical | Exploited | |
| 2026-07 | CVE-2026-50522 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-07 | CVE-2026-54108 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-55016 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-55019 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-55020 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-55021 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-55023 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-55026 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-55027 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-55028 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-55030 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-55032 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Important | No | |
| 2026-07 | CVE-2026-55033 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-07 | CVE-2026-55034 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-55035 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-55038 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Important | No | |
| 2026-07 | CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass VulnerabilityMicrosoft Office SharePoint | SE20192016 | Security Feature Bypass | Critical | No | |
| 2026-07 | CVE-2026-55045 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-07 | CVE-2026-55047 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-55050 | Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-55051 | Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-55052 | Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Important | No | |
| 2026-07 | CVE-2026-55055 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Important | No | |
| 2026-07 | CVE-2026-55121 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-55124 | Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Important | No | |
| 2026-07 | CVE-2026-55125 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office | SE20192016 | Remote Code Execution | Important | No | |
| 2026-07 | CVE-2026-55126 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-55127 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-07 | CVE-2026-55128 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Important | No | |
| 2026-07 | CVE-2026-55130 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Important | No | |
| 2026-07 | CVE-2026-55132 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-07 | CVE-2026-55134 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Important | No | |
| 2026-07 | CVE-2026-55135 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-55142 | Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-56157 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-07 | CVE-2026-56192 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-07 | CVE-2026-58277 | Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | 20192016 | Elevation of Privilege | Important | No | |
| 2026-07 | CVE-2026-62826 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-33113 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-44819 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office | SE20192016 | Remote Code Execution | Important | No | |
| 2026-06 | CVE-2026-44821 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-06 | CVE-2026-44824 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office | SE20192016 | Remote Code Execution | Important | No | |
| 2026-06 | CVE-2026-45453 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-45454 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-06 | CVE-2026-45456 | Microsoft Outlook and Word Remote Code Execution VulnerabilityMicrosoft Office | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-06 | CVE-2026-45458 | Microsoft Outlook and Word Remote Code Execution VulnerabilityMicrosoft Office | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-06 | CVE-2026-45462 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-45464 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-45465 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-45467 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-45468 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-45471 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Important | No | |
| 2026-06 | CVE-2026-45475 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office | SE20192016 | Remote Code Execution | Important | No | |
| 2026-06 | CVE-2026-45479 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-45481 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-45483 | Microsoft Office Project Server Spoofing VulnerabilityMicrosoft Office Project | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-45484 | Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Important | No | |
| 2026-06 | CVE-2026-45485 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | SE20192016 | Information Disclosure | Important | No | |
| 2026-06 | CVE-2026-47298 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-06 | CVE-2026-47634 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE2019 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-47636 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-47637 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-47638 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-47639 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-47640 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-47641 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-48560 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-06 | CVE-2026-48562 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-05 | CVE-2026-33110 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-05 | CVE-2026-33112 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-05 | CVE-2026-35439 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-05 | CVE-2026-40357 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-05 | CVE-2026-40365 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-05 | CVE-2026-40367 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-05 | CVE-2026-40368 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-05 | CVE-2026-45659 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-05 | CVE-2026-47294 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-04 | CVE-2026-32201 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | Exploited | |
| 2026-04 | CVE-2026-20945 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-03 | CVE-2026-26105 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-03 | CVE-2026-26106 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-03 | CVE-2026-26113 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office | SE20192016 | Remote Code Execution | Critical | No | |
| 2026-03 | CVE-2026-26114 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | 20192016 | Remote Code Execution | Important | No | |
| 2026-02 | CVE-2026-21260 | Microsoft Outlook Spoofing VulnerabilityMicrosoft Office Outlook | SE20192016 | Spoofing | Important | No | |
| 2026-02 | CVE-2026-21511 | Microsoft Outlook Spoofing VulnerabilityMicrosoft Office Outlook | SE20192016 | Spoofing | Important | No | |
| 2026-01 | CVE-2026-20943 | Microsoft Office Click-To-Run Remote Code Execution VulnerabilityMicrosoft Office | SE20192016 | Remote Code Execution | Important | No | |
| 2026-01 | CVE-2026-20947 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-01 | CVE-2026-20948 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2026-01 | CVE-2026-20951 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2026-01 | CVE-2026-20958 | Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE20192016 | Information Disclosure | Important | No | |
| 2026-01 | CVE-2026-20959 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2026-01 | CVE-2026-20963 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-12 | CVE-2025-62555 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2025-12 | CVE-2025-62558 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2025-12 | CVE-2025-62559 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2025-12 | CVE-2025-62562 | Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft Office Outlook | 20192016 | Remote Code Execution | Important | No | |
| 2025-12 | CVE-2025-64672 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE | Spoofing | Important | No | KB5002815 SE 16.0.19127.20378 |
| 2025-11 | CVE-2025-62204 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-10 | CVE-2025-59221 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2025-10 | CVE-2025-59222 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2025-10 | CVE-2025-59228 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-10 | CVE-2025-59232 | Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office Excel | 20192016 | Information Disclosure | Important | No | |
| 2025-10 | CVE-2025-59235 | Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office Excel | 20192016 | Information Disclosure | Important | No | |
| 2025-10 | CVE-2025-59237 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-09 | CVE-2025-54897 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-09 | CVE-2025-54905 | Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word | 20192016 | Information Disclosure | Important | No | |
| 2025-09 | CVE-2025-54906 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office | 20192016 | Remote Code Execution | Important | No | |
| 2025-08 | CVE-2025-49712 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | 20192016 | Remote Code Execution | Important | No | |
| 2025-08 | CVE-2025-53733 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Critical | No | |
| 2025-08 | CVE-2025-53736 | Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word | 20192016 | Information Disclosure | Important | No | |
| 2025-08 | CVE-2025-53760 | Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Important | No | |
| 2025-07 | CVE-2025-53770 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Critical | Exploited | |
| 2025-07 | CVE-2025-49701 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-07 | CVE-2025-49703 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Critical | No | |
| 2025-07 | CVE-2025-49704 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | 20192016 | Remote Code Execution | Critical | No | |
| 2025-07 | CVE-2025-49706 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2025-07 | CVE-2025-53771 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2025-06 | CVE-2025-47163 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-06 | CVE-2025-47166 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-06 | CVE-2025-47168 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2025-06 | CVE-2025-47169 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2025-06 | CVE-2025-47172 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Critical | No | |
| 2025-05 | CVE-2025-29976 | Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Important | No | KB5002706 2019 16.0.10417.20010KB5002708 2019 16.0.10417.20010KB5002709 SE 16.0.18526.20286KB5002712 2016 16.0.5500.1001KB5002722 2016 16.0.5500.1001 |
| 2025-05 | CVE-2025-30378 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | KB5002708 2019 16.0.10417.20010KB5002709 SE 16.0.18526.20286KB5002722 2016 16.0.5500.1001 |
| 2025-05 | CVE-2025-30382 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | KB5002708 2019 16.0.10417.20010KB5002709 SE 16.0.18526.20286KB5002722 2016 16.0.5500.1001 |
| 2025-05 | CVE-2025-30384 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | KB5002708 2019 16.0.10417.20010KB5002709 SE 16.0.18526.20286KB5002722 2016 16.0.5500.1001 |
| 2025-04 | CVE-2025-26642 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office | 2019 | Remote Code Execution | Important | No | KB5002691 2019 16.0.10417.20003 |
| 2025-04 | CVE-2025-27746 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office | SE | Remote Code Execution | Important | No | KB5002680 SE language pack 16.0.10417.20003 |
| 2025-04 | CVE-2025-27747 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2025-04 | CVE-2025-29793 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-04 | CVE-2025-29794 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-04 | CVE-2025-29820 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | 2016 | Remote Code Execution | Important | No | |
| 2025-02 | CVE-2025-21400 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-01 | CVE-2025-21344 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-01 | CVE-2025-21348 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2025-01 | CVE-2025-21393 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2024-12 | CVE-2024-49062 | Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE20192016 | Information Disclosure | Important | No | |
| 2024-12 | CVE-2024-49064 | Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE20192016 | Information Disclosure | Important | No | |
| 2024-12 | CVE-2024-49065 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Word | 20192016 | Remote Code Execution | Important | No | |
| 2024-12 | CVE-2024-49068 | Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Important | No | |
| 2024-12 | CVE-2024-49070 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2024-11 | ADV240001 | Microsoft SharePoint Server Defense in Depth UpdateMicrosoft Office SharePoint | SE20192016 | Defense in Depth | None | No | |
| 2024-10 | CVE-2024-43503 | Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint | SE20192016 | Elevation of Privilege | Important | No | |
| 2024-09 | CVE-2024-38018 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Critical | No | |
| 2024-09 | CVE-2024-38227 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2024-09 | CVE-2024-38228 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2024-09 | CVE-2024-43464 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Critical | No | |
| 2024-09 | CVE-2024-43466 | Microsoft SharePoint Server Denial of Service VulnerabilityMicrosoft Office SharePoint | SE20192016 | Denial of Service | Important | No | |
| 2024-07 | CVE-2024-32987 | Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE20192016 | Information Disclosure | Important | No | |
| 2024-07 | CVE-2024-38023 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Critical | No | |
| 2024-07 | CVE-2024-38024 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2024-07 | CVE-2024-38094 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2024-06 | CVE-2024-30100 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2024-05 | CVE-2024-30043 | Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft Office SharePoint | SE20192016 | Information Disclosure | Important | No | |
| 2024-05 | CVE-2024-30044 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Critical | No | |
| 2024-04 | CVE-2024-26251 | Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint | SE20192016 | Spoofing | Important | No | |
| 2024-03 | CVE-2024-21426 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No | |
| 2024-01 | CVE-2024-21318 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | SE20192016 | Remote Code Execution | Important | No |
Where 2019 and 2016 stand
SharePoint Server 2019 and 2016 left support on 14 July 2026, as the end of support tracker records.2019 The newest update MSRC lists for it first appears in the August 2026 document (KB5002894, KB5002896). Later documents name it in 1 more vulnerability, and give as the fix only updates it had already received.2016 The newest update MSRC lists for it first appears in the August 2026 document (KB5002905, KB5002906). Later documents name it in 1 more vulnerability, and give as the fix only updates it had already received.
How to read it
Impact and severity are MSRC's, per version. Badge colours follow MSRC's four severity levels; the page adds no score of its own.A row is here because MSRC lists a SharePoint Server version as affected. Some are filed under Office, Word or Excel; the line under the title is MSRC's own label.Exploited means MSRC's record says
Exploited:Yes. A row without it is not a statement that nobody is exploiting it.Whether a farm has an update is a fact about the farm. Compare the build each fix lists with (Get-SPFarm).BuildVersion and with Central Administration's patch status for each server.The data is read from MSRC's CVRF API, which answers without sign-in, by a tool this site runs and commits with the time it read. Your browser calls nothing. Every row links to its record in MSRC's Security Update Guide, where a fix is confirmed before it is installed.