SharePoint Server — security advisories

vendor: Microsoft88 advisories31 exploited10 sourceslatest 2026-08-18⚡ RSS feed

Every advisory CSIRTS.com has correlated to SharePoint Server, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch SharePoint Server

Get an email when a new SharePoint Server advisory drops — max one per day, one-click unsubscribe.

CVE-2026-55040: Microsoft SharePoint Weak Authentication Vulnerability

criticalexploitedCVE-2026-55040cisa-kev2026-08-18

CVE-2026-64901: Microsoft SharePoint Server Remote Code Execution Vulnerability

highCVSS 8.8CVE-2026-64901msrc2026-08-11

CVE-2026-58639: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 6.5CVE-2026-58639msrc2026-08-11

CVE-2026-66805: Microsoft SharePoint Server Remote Code Execution Vulnerability

highCVSS 8.8CVE-2026-66805msrc2026-08-11

CVE-2026-64916: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-64916msrc2026-08-11

CVE-2026-64902: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-64902msrc2026-08-11

CVE-2026-64900: Microsoft SharePoint Server Spoofing Vulnerability

highCVSS 7.3CVE-2026-64900msrc2026-08-11

CVE-2026-64897: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-64897msrc2026-08-11

CVE-2026-62917: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-62917msrc2026-08-11

CVE-2026-62839: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 6.5CVE-2026-62839msrc2026-08-11

CVE-2026-70355: Microsoft SharePoint Server Elevation of Privilege Vulnerability

highCVSS 7.3CVE-2026-70355msrc2026-08-11

CVE-2026-70324: Microsoft SharePoint Elevation of Privilege Vulnerability

highCVSS 8.8CVE-2026-70324msrc2026-08-11

CVE-2026-70321: Microsoft SharePoint Remote Code Execution Vulnerability

highCVSS 8.8CVE-2026-70321msrc2026-08-11

CVE-2026-65660: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 6.5CVE-2026-65660msrc2026-08-11

CVE-2026-65663: Microsoft SharePoint Server Remote Code Execution Vulnerability

highCVSS 8.8CVE-2026-65663msrc2026-08-11

CVE-2026-65658: Microsoft SharePoint Server Remote Code Execution Vulnerability

highCVSS 8.8CVE-2026-65658msrc2026-08-11

CVE-2026-64922: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-64922msrc2026-08-11

CVE-2026-65665: Microsoft SharePoint Server Remote Code Execution Vulnerability

highCVSS 8.8CVE-2026-65665msrc2026-08-11

CVE-2026-62829: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-62829msrc2026-08-11

CVE-2026-70326: Microsoft SharePoint Server Elevation of Privilege Vulnerability

highCVSS 8.8CVE-2026-70326msrc2026-08-11

CVE-2026-64921: Microsoft SharePoint Server Elevation of Privilege Vulnerability

highCVSS 8.8CVE-2026-64921msrc2026-08-11

CVE-2026-63520: Microsoft SharePoint Server Remote Code Execution Vulnerability

highCVSS 8.1CVE-2026-63520msrc2026-08-11

CVE-2026-63516: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 6.5CVE-2026-63516msrc2026-08-11

CVE-2026-63512: Microsoft SharePoint Server Tampering Vulnerability

mediumCVSS 6.5CVE-2026-63512msrc2026-08-11

CVE-2026-63514: Microsoft SharePoint Server Remote Code Execution Vulnerability

highCVSS 8.8CVE-2026-63514msrc2026-08-11

CVE-2026-66808: Microsoft SharePoint Server Remote Code Execution Vulnerability

highCVSS 8.8CVE-2026-66808msrc2026-08-11

CVE-2026-62827: Microsoft SharePoint Server Elevation of Privilege Vulnerability

highCVSS 8.8CVE-2026-62827msrc2026-08-11

CVE-2026-62837: Microsoft SharePoint Server Information Disclosure Vulnerability

mediumCVSS 6.5CVE-2026-62837msrc2026-08-11

Security Alert: [Updated] Microsoft Releases July 2026 Security Updates

unknownexploitedCVE-2026-56164 CVE-2026-56155 CVE-2026-58644 CVE-2026-50522jpcert2026-07-31

2026-009: Critical Vulnerabilities in Microsoft SharePoint

criticalexploitedCVE-2026-50522 CVE-2026-32201 CVE-2026-45659 CVE-2026-56164cert-eu2026-07-23

CISA Adds Two Known Exploited Vulnerabilities to Catalog

highexploitedCVE-2026-16232 CVE-2026-50522cisa2026-07-22

CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2026-50522cisa-kev2026-07-22

Multiple vulnerabilities in Microsoft Sharepoint (July 22, 2026)

unknownexploitedCVE-2026-50522 CVE-2026-58644cert-fr-alerte2026-07-22

NCSC-2026-0237 [1.02] [H/H] Vulnerabilities Fixed in Microsoft Office

unknownexploitedCVE-2026-58644 CVE-2026-56164 CVE-2026-50522 CVE-2026-54108ncsc-nl2026-07-21

CVE-2026-58644: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2026-58644cisa-kev2026-07-16

AL26-017 - Critical vulnerabilities impacting Microsoft SharePoint Server – CVE-2026-56164, CVE-2026-55040 and CVE-2026-58644

criticalexploitedCVE-2026-56164 CVE-2026-55040 CVE-2026-58644 CVE-2026-55164cccs2026-07-15

CVE-2026-58644: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

criticalexploitedCVSS 9.8CVE-2026-58644nvd2026-07-14

CVE-2026-56164: Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

mediumexploitedCVSS 5.3CVE-2026-56164nvd2026-07-14

CISA Urges SharePoint Hardening After New Exploitations

unknownexploitedCVE-2026-58644 CVE-2026-32201 CVE-2026-45659 CVE-2026-56164cisa2026-07-14

CVE-2026-55020: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-55020msrc2026-07-14

CVE-2026-56164: Microsoft SharePoint Server Elevation of Privilege Vulnerability

mediumexploitedCVSS 5.3CVE-2026-56164msrc2026-07-14

CVE-2026-58644: Microsoft SharePoint Remote Code Execution Vulnerability

criticalexploitedCVSS 9.8CVE-2026-58644msrc2026-07-14

CVE-2026-50522: Microsoft SharePoint Remote Code Execution Vulnerability

criticalexploitedCVSS 9.8CVE-2026-50522msrc2026-07-14

CVE-2026-55016: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-55016msrc2026-07-14

CVE-2026-55021: Microsoft SharePoint Server Spoofing Vulnerability

highCVSS 7.3CVE-2026-55021msrc2026-07-14

CVE-2026-54108: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 6.5CVE-2026-54108msrc2026-07-14

CVE-2026-56157: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 5.4CVE-2026-56157msrc2026-07-14

CVE-2026-55051: Microsoft SharePoint Server Information Disclosure Vulnerability

mediumCVSS 6.5CVE-2026-55051msrc2026-07-14

CVE-2026-55052: Microsoft SharePoint Elevation of Privilege Vulnerability

highCVSS 8.8CVE-2026-55052msrc2026-07-14

CVE-2026-55019: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-55019msrc2026-07-14

CVE-2026-62826: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-62826msrc2026-07-14

CVE-2026-56164: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

criticalexploitedCVE-2026-56164cisa-kev2026-07-14

AL26-015 - Critical vulnerability impacting Microsoft SharePoint Server – CVE-2026-45659

criticalexploitedCVE-2026-45659cccs2026-07-02

[UPDATE] [high] Microsoft SharePoint Server 2016 and SharePoint Server 2019: Vulnerability allows code execution

highCVE-2026-45659cert-bund2026-07-02

CISA Adds One Known Exploited Vulnerability to Catalog

highexploitedCVE-2026-45659cisa2026-07-01

CVE-2026-45659: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2026-45659cisa-kev2026-07-01

CVE-2026-45462: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-45462msrc2026-06-09

CVE-2026-45481: Microsoft SharePoint Server Spoofing Vulnerability

highCVSS 7.3CVE-2026-45481msrc2026-06-09

CVE-2026-45484: Microsoft SharePoint Elevation of Privilege Vulnerability

highCVSS 8.8CVE-2026-45484msrc2026-06-09

CVE-2026-47640: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-47640msrc2026-06-09

CVE-2026-45454: Microsoft SharePoint Remote Code Execution Vulnerability

mediumCVSS 6.5CVE-2026-45454msrc2026-06-09

CVE-2026-48562: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-48562msrc2026-06-09

CVE-2026-33113: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 5.4CVE-2026-33113msrc2026-06-09

CVE-2026-47638: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-47638msrc2026-06-09

CVE-2026-47639: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 5.4CVE-2026-47639msrc2026-06-09

CVE-2026-47298: Microsoft SharePoint Server Remote Code Execution Vulnerability

highCVSS 8CVE-2026-47298msrc2026-06-09

CVE-2026-47641: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-47641msrc2026-06-09

CVE-2026-47637: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-47637msrc2026-06-09

CVE-2026-45453: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 5.4CVE-2026-45453msrc2026-06-09

CVE-2026-45468: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-45468msrc2026-06-09

CVE-2026-45467: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 4.6CVE-2026-45467msrc2026-06-09

CVE-2026-47636: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 5.4CVE-2026-47636msrc2026-06-09

CVE-2026-47634: Microsoft SharePoint Server Spoofing Vulnerability

highCVSS 7.3CVE-2026-47634msrc2026-06-09

CVE-2026-45465: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 5.4CVE-2026-45465msrc2026-06-09

CVE-2026-45464: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 5.4CVE-2026-45464msrc2026-06-09

CVE-2026-48560: Microsoft SharePoint Server Spoofing Vulnerability

mediumCVSS 5.4CVE-2026-48560msrc2026-06-09

Security Alert: Microsoft Releases April 2026 Security Updates

unknownexploitedCVE-2026-32201jpcert2026-04-15

CVE-2026-32201: Microsoft SharePoint Server Improper Input Validation Vulnerability

criticalexploitedCVE-2026-32201cisa-kev2026-04-14

2026-004: Critical Vulnerability in SharePoint Exploited

criticalexploitedCVE-2026-20963 CVE-2026-26106 CVE-2026-26113 CVE-2026-26114cert-eu2026-03-25

CVE-2026-20963: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2026-20963cisa-kev2026-03-18

CVE-2025-49704: Microsoft SharePoint Code Injection Vulnerability

criticalexploitedCVE-2025-49704cisa-kev2025-07-22

CVE-2025-49706: Microsoft SharePoint Improper Authentication Vulnerability

criticalexploitedCVE-2025-49706cisa-kev2025-07-22

[Update] Multiple vulnerabilities in Microsoft SharePoint (July 21, 2025)

unknownexploitedCVE-2025-53770 CVE-2025-53771cert-fr-alerte2025-07-21

CVE-2025-53770: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2025-53770cisa-kev2025-07-20

CVE-2024-38094: Microsoft SharePoint Deserialization Vulnerability

criticalexploitedCVE-2024-38094cisa-kev2024-10-22

CVE-2023-24955: Microsoft SharePoint Server Code Injection Vulnerability

criticalexploitedCVE-2023-24955cisa-kev2024-03-26

CVE-2023-29357: Microsoft SharePoint Server Privilege Escalation Vulnerability

criticalexploitedCVE-2023-29357cisa-kev2024-01-10

CVE-2019-0604: Microsoft SharePoint Remote Code Execution Vulnerability

criticalexploitedCVE-2019-0604cisa-kev2021-11-03