Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Sharepoint_enterprise_server
(Microsoft)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 257 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2025-08-12 | CVE-2025-53733 | Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server, Sharepoint_server, Word | 8.4 | ||
| 2025-08-12 | CVE-2025-53736 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server, Sharepoint_server, Word | 6.2 | ||
| 2025-07-08 | CVE-2025-49706 | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | Sharepoint_enterprise_server, Sharepoint_server | 6.5 | ||
| 2025-07-08 | CVE-2025-47994 | Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally. | 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server | 8.6 | ||
| 2025-04-08 | CVE-2025-27747 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server, Sharepoint_server, Word | N/A | ||
| 2025-04-08 | CVE-2025-27747 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server, Sharepoint_server, Word | N/A | ||
| 2025-04-08 | CVE-2025-29793 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Sharepoint_enterprise_server, Sharepoint_server | 7.2 | ||
| 2025-04-08 | CVE-2025-29793 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Sharepoint_enterprise_server, Sharepoint_server | 7.2 | ||
| 2025-04-08 | CVE-2025-29794 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Sharepoint_enterprise_server, Sharepoint_server | 8.8 | ||
| 2025-06-10 | CVE-2025-47163 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Sharepoint_enterprise_server, Sharepoint_server | 8.8 |