Veille CVE

Recherche « Microsoft sharepoint server »

167 CVE

Critique 6 Élevée 85 Moyenne 73 Faible 3 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft sharepoint server » ✕
  1. CVE-2026-108452 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  2. CVE-2026-88164 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  3. CVE-2026-97783 6.1 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  4. CVE-2026-97782 6.8 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

  5. CVE-2026-97755 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-96044 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  7. CVE-2026-88209 4.6 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  8. CVE-2026-88208 4.6 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  9. CVE-2026-88206 7.5 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  10. CVE-2026-88204 7.3 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  11. CVE-2026-88200 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  12. CVE-2026-88198 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  13. CVE-2026-88166 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  14. CVE-2026-88163 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  15. CVE-2026-88155 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  16. CVE-2026-85932 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  17. CVE-2026-85900 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  18. CVE-2026-70298 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  19. CVE-2026-70267 7.2 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  20. CVE-2026-70266 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  21. CVE-2026-70259 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  22. CVE-2026-70251 7.5 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  23. CVE-2026-70246 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  24. CVE-2026-70217 4.9 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  25. CVE-2026-70202 7.5 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  26. CVE-2026-69943 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  27. CVE-2026-105720 4.3 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  28. CVE-2026-105719 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  29. CVE-2026-105713 5.7 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

  30. CVE-2026-105013 7.4 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  31. CVE-2026-102866 8.1 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

  32. CVE-2026-102865 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  33. CVE-2026-102864 4.6 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  34. CVE-2026-102863 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  35. CVE-2026-102862 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  36. CVE-2026-102861 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  37. CVE-2026-102860 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  38. CVE-2026-102859 4.6 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  39. CVE-2026-69904 3.5 Faible

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  40. CVE-2026-69804 7.5 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  41. CVE-2026-69724 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  42. CVE-2026-69716 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  43. CVE-2026-69690 5.4 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  44. CVE-2026-69683 7.7 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  45. CVE-2026-69636 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  46. CVE-2026-69615 4.8 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  47. CVE-2026-69465 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  48. CVE-2026-69464 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  49. CVE-2026-69417 5.4 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  50. CVE-2026-69409 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  51. CVE-2026-69402 5.4 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  52. CVE-2026-69282 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  53. CVE-2026-69273 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  54. CVE-2026-69268 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  55. CVE-2026-70355 8.7 Élevée

    Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  56. CVE-2026-70326 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  57. CVE-2026-70324 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  58. CVE-2026-70321 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  59. CVE-2026-70306 9.3 Critique

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  60. CVE-2026-66808 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  61. CVE-2026-66805 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  62. CVE-2026-65665 8.8 Élevée

    Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  63. CVE-2026-65663 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  64. CVE-2026-65660 8.8 Élevée Exploitée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  65. CVE-2026-65658 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  66. CVE-2026-64922 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  67. CVE-2026-64921 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  68. CVE-2026-64916 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  69. CVE-2026-64902 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  70. CVE-2026-64901 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  71. CVE-2026-64900 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  72. CVE-2026-64897 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  73. CVE-2026-63520 8.1 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  74. CVE-2026-63516 6.5 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  75. CVE-2026-63514 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  76. CVE-2026-63512 6.5 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

  77. CVE-2026-62917 4.6 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  78. CVE-2026-62839 6.5 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  79. CVE-2026-62837 6.5 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  80. CVE-2026-62829 5.4 Moyenne

    Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  81. CVE-2026-62827 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  82. CVE-2026-58639 6.5 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  83. CVE-2026-57105 5.4 Moyenne

    Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  84. CVE-2026-62826 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  85. CVE-2026-58277 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft sharepoint server

    Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  86. CVE-2026-56192 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  87. CVE-2026-56157 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  88. CVE-2026-55142 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  89. CVE-2026-55135 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  90. CVE-2026-55134 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  91. CVE-2026-55132 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  92. CVE-2026-55130 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  93. CVE-2026-55128 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  94. CVE-2026-55127 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  95. CVE-2026-55126 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  96. CVE-2026-55125 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  97. CVE-2026-55124 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  98. CVE-2026-55121 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  99. CVE-2026-55055 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  100. CVE-2026-55052 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  101. CVE-2026-55051 6.5 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  102. CVE-2026-55050 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  103. CVE-2026-55047 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  104. CVE-2026-55045 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

  105. CVE-2026-55040 9.1 Critique Exploitée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

  106. CVE-2026-55038 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  107. CVE-2026-55035 3.3 Faible

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  108. CVE-2026-55034 8.7 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  109. CVE-2026-55033 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  110. CVE-2026-55032 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  111. CVE-2026-55030 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  112. CVE-2026-55028 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  113. CVE-2026-55027 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  114. CVE-2026-55026 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

  115. CVE-2026-55023 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  116. CVE-2026-55021 8.7 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  117. CVE-2026-55020 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  118. CVE-2026-55019 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  119. CVE-2026-55016 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  120. CVE-2026-58644 9.8 Critique Exploitée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  121. CVE-2026-56164 9.8 Critique Exploitée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

  122. CVE-2026-54108 6.5 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  123. CVE-2026-50522 9.8 Critique Exploitée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  124. CVE-2026-48562 4.6 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  125. CVE-2026-48560 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  126. CVE-2026-47641 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  127. CVE-2026-47640 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  128. CVE-2026-47639 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  129. CVE-2026-47638 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  130. CVE-2026-47637 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  131. CVE-2026-47636 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  132. CVE-2026-47634 5.4 Moyenne

    Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  133. CVE-2026-47298 8.0 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  134. CVE-2026-45485 3.3 Faible

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  135. CVE-2026-45484 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  136. CVE-2026-45483 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network.

  137. CVE-2026-45481 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  138. CVE-2026-45479 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  139. CVE-2026-45475 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  140. CVE-2026-45471 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  141. CVE-2026-45468 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  142. CVE-2026-45467 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  143. CVE-2026-45465 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  144. CVE-2026-45464 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  145. CVE-2026-45462 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  146. CVE-2026-45458 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  147. CVE-2026-45456 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  148. CVE-2026-45454 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  149. CVE-2026-45453 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  150. CVE-2026-44824 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.