BaselineWatch
61084 CVEs · 136 in KEV
Desk
CVEs known61,084 New, 24 h187 Changed, 24 h199 In KEV136 Public exploit1,656 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVEs
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-55040KEVexploit ×5 9.1 critical 70.0% microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. 18 h ago
CVE-2026-32201KEVexploit 6.5 medium 43.0% microsoft, sharepoint_server Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. Mon 26 Oct
CVE-2026-65660KEVexploit ×2 8.8 high 8.0% microsoft, sharepoint_server Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Mon 26 Oct
CVE-2026-50522KEVexploit ×5 9.8 critical 3.0% microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. 18 h ago
CVE-2026-56164KEVexploit ×2 5.3 medium 1.0% microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. 18 h ago
CVE-2026-58644KEV 9.8 critical 16.0% microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. 18 h ago
CVE-2023-35311KEV 8.8 high 16.0% microsoft, 365_apps, office_2019, office_2021 Microsoft Outlook Security Feature Bypass Vulnerability 8 Oct

7 of 7

Download these 7 as CSV · subscribe to this list.

EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.