Product:

Sharepoint_enterprise_server

(Microsoft)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 255
Date Id Summary Products Score Patch Annotated
2025-07-08 CVE-2025-49706 Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. Sharepoint_enterprise_server, Sharepoint_server 6.5
2025-07-08 CVE-2025-47994 Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally. 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server 8.6
2025-04-08 CVE-2025-27747 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server, Sharepoint_server, Word N/A
2025-04-08 CVE-2025-27747 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server, Sharepoint_server, Word N/A
2025-04-08 CVE-2025-29793 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint_enterprise_server, Sharepoint_server 7.2
2025-04-08 CVE-2025-29793 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint_enterprise_server, Sharepoint_server 7.2
2025-04-08 CVE-2025-29794 Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint_enterprise_server, Sharepoint_server 8.8
2025-06-10 CVE-2025-47163 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint_enterprise_server, Sharepoint_server 8.8
2025-06-10 CVE-2025-47166 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint_enterprise_server, Sharepoint_server 8.8
2025-06-10 CVE-2025-47168 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server, Sharepoint_server, Word N/A