Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

256 records

Vendor: Microsoft Component: Sharepoint Enterprise Server Clear all filters
TI-2025-34639 CVE-2025-54905 · GHSA-f8jp-v63x-5qqw

Microsoft Word Information Disclosure Vulnerability

Priority LOW 32

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00622 Published 2025-09-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.101.25091314 +2 CWE-822
TI-2025-33647 CVE-2025-53736 · GHSA-3jh7-36pw-wpwh

Microsoft Word Information Disclosure Vulnerability

Priority LOW 31

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.005 Published 2025-08-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.100.25081015 +3 CWE-126
TI-2025-33644 CVE-2025-53733 · GHSA-g9cg-chvx-p8m5

Microsoft Word Remote Code Execution Vulnerability

Priority LOW 39

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00546 Published 2025-08-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.100.25081015 +3 CWE-681
TI-2025-31676 CVE-2025-49706 · GHSA-j67g-r75f-8hgp

Microsoft SharePoint Server Spoofing Vulnerability

Priority CRITICAL 86KEV

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.99057 Published 2025-07-08 Fixed in 16.0.5508.1000, 16.0.10417.20027 +1 CWE-287
TI-2025-30378 CVE-2025-47994 · GHSA-c957-43mv-gcvv

Microsoft Office Elevation of Privilege Vulnerability

Priority MEDIUM 45

Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.03276 Published 2025-07-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5508.1001 CWE-502
TI-2025-29758 CVE-2025-47172 · GHSA-rq5m-6c4v-55rj

Microsoft SharePoint Server Remote Code Execution Vulnerability

Priority MEDIUM 44

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01764 Published 2025-06-10 Fixed in 16.0.5504.1001, 16.0.10417.20018 +1 CWE-89
TI-2025-29755 CVE-2025-47169 · GHSA-9qp5-76v7-3g7w

Microsoft Word Remote Code Execution Vulnerability

Priority LOW 37

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00684 Published 2025-06-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.98.25060824 +3 CWE-122
TI-2025-29754 CVE-2025-47168 · GHSA-638c-8f6r-29v5

Microsoft Word Remote Code Execution Vulnerability

Priority LOW 37

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00669 Published 2025-06-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.98.25060824 +3 CWE-416
TI-2025-29752 CVE-2025-47166 · GHSA-jvcx-4h9f-wx33

Microsoft SharePoint Server Remote Code Execution Vulnerability

Priority MEDIUM 60

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.22566 Published 2025-06-10 Fixed in 16.0.5504.1001, 16.0.10417.20018 +1 CWE-502
TI-2025-29749 CVE-2025-47163 · GHSA-c4r7-vqgv-hxrw

Microsoft SharePoint Server Remote Code Execution Vulnerability

Priority MEDIUM 60

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.21819 Published 2025-06-10 Fixed in 16.0.5504.1001, 16.0.10417.20018 +1 CWE-502
TI-2025-21227 CVE-2025-29820 · GHSA-f69r-g2v6-6r6h

Microsoft Word Remote Code Execution Vulnerability

Priority LOW 37

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00782 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1002 +1 CWE-416
TI-2025-21205 CVE-2025-29794 · GHSA-wjr6-rfwf-wx2f

Microsoft SharePoint Remote Code Execution Vulnerability

Priority MEDIUM 48

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0485 Published 2025-04-08 Fixed in 16.0.5495.1002, 16.0.10417.20003 +1 CWE-285
TI-2025-21204 CVE-2025-29793 · GHSA-w5wx-73w5-58mw

Microsoft SharePoint Remote Code Execution Vulnerability

Priority MEDIUM 54

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.23627 Published 2025-04-08 Fixed in 16.0.5495.1002, 16.0.10417.20003 +1 CWE-502
TI-2025-20540 CVE-2025-27747 · GHSA-p5vq-38hr-952c

Microsoft Word Remote Code Execution Vulnerability

Priority LOW 38

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00839 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.96.25041326 +2 CWE-822
TI-2023-10436 CVE-2023-24950 · GHSA-5j73-cmrw-hvh4

Microsoft SharePoint Server Spoofing Vulnerability

Priority HIGH 65

Microsoft SharePoint Server Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.67452 Published 2023-05-09 Fixed in 16.0.5395.1000, 16.0.10398.20000 +1 CWE-20
TI-2023-08100 CVE-2023-21716 · GHSA-64mm-8wcm-jw5g

Microsoft Word Remote Code Execution Vulnerability

Priority CRITICAL 90

Microsoft Word Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.848 Published 2023-02-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.70.23021201 +4 CWE-190
TI-2022-19645 CVE-2022-41122 · GHSA-hjh2-cjr9-5h3c

Microsoft SharePoint Server Spoofing Vulnerability

Priority LOW 33

Microsoft SharePoint Server Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02015 Published 2022-11-09 Fixed in 15.0.5485.1000, 16.0.5361.1002 +2
TI-2022-19631 CVE-2022-41103 · GHSA-6f22-3fg3-w86j

Microsoft Word Information Disclosure Vulnerability

Priority LOW 27

Microsoft Word Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01014 Published 2022-11-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.10392.20000 +3
TI-2022-19599 CVE-2022-41061 · GHSA-2jx9-cx6r-jg2x

Microsoft Word Remote Code Execution Vulnerability

Priority LOW 39

Microsoft Word Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01326 Published 2022-11-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.67.22111300 +4 CWE-94
Load more