Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-32201KEVexploit | 6.5 medium | 43.0% | microsoft, sharepoint_server | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2026-65660KEVexploit ×2 | 8.8 high | 8.0% | microsoft, sharepoint_server | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2016-3357exploit | 7.8 high | 55.0% | microsoft, office, office_web_apps, office_web_apps_server | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 15 Oct |
| CVE-2015-2468exploit | 9.3 high | 43.0% | microsoft, office, office_compatibility_pack, sharepoint_server | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 14 Oct |
| CVE-2025-54897exploit | 8.8 high | 22.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-63520exploit | 8.1 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 2 h ago |
| CVE-2026-50522exploit ×5 | 9.8 critical | — | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 2 h ago |
| CVE-2026-55040exploit ×5 | 9.1 critical | — | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. | 2 h ago |
| CVE-2026-56164exploit ×2 | 5.3 medium | — | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | 2 h ago |
| CVE-2026-33112 | 8.8 high | 31.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2016-3234 | 5.5 medium | 26.0% | microsoft, office, office_compatibility_pack, office_web_apps | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability." | 15 Oct |
| CVE-2015-6093 | 9.3 high | 23.0% | microsoft, office, office_web_apps, office_web_apps_server | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." | 14 Oct |
| CVE-2015-0085 | 9.3 high | 19.0% | microsoft, excel, excel_viewer, office | Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 Gold and SP1, Word 2013 Gold and SP1, Office 2013 RT Gold and SP1, Word 2013 RT Gold and SP1, Excel Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 Gold and SP1, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web Applications 2010 SP2, Office Web Apps Server 2010 SP2, Web Apps Server 2013 Gold and SP1, SharePoint Server 2007 SP3, Windows SharePoint Services 3.0 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." | 14 Oct |
| CVE-2026-20945 | 5.4 medium | 19.0% | microsoft, sharepoint_server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2017-8509 | 8.8 high | 18.0% | microsoft, office, office_compatibility_pack, office_web_apps | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506. | 15 Oct |
| CVE-2016-0025 | 7.3 high | 17.0% | microsoft, office, office_compatibility_pack, office_online_server | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." | 15 Oct |
| CVE-2017-0281 | 7.8 high | 16.0% | microsoft, office, office_online_server, office_web_apps | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word 2016, and Skype for Business 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0262. | 15 Oct |
| CVE-2015-6117 | 6.1 medium | 7.0% | microsoft, sharepoint_foundation, sharepoint_server | Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2016-0011. | 14 Oct |
| CVE-2016-0011 | 5.4 medium | 5.0% | microsoft, sharepoint_server, sharepoint_foundation | Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2015-6117. | 15 Oct |
| CVE-2026-66808 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 2 h ago |
| CVE-2026-64901 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 2 h ago |
| CVE-2026-65665 | 8.8 high | 2.0% | microsoft, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 2 h ago |
| CVE-2026-65663 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 2 h ago |
| CVE-2026-65658 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 2 h ago |
| CVE-2026-63514 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 2 h ago |
| CVE-2026-33110 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-35439 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-40357 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-70321 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-66805 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 21 Oct |
| CVE-2025-59237 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-85900 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 14 Oct |
| CVE-2026-40368 | 8.0 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2025-62204 | 8.0 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-63516 | 6.5 medium | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 2 h ago |
| CVE-2026-70306 | 9.3 critical | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 2 h ago |
| CVE-2025-64672 | 9.0 critical | 1.0% | microsoft, sharepoint_server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14 Oct |
| CVE-2026-64921 | 8.8 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 2 h ago |
| CVE-2026-70324 | 8.8 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 2 h ago |
| CVE-2026-62827 | 8.8 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 2 h ago |
| CVE-2026-40365 | 8.8 high | 1.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-70326 | 8.8 high | 1.0% | microsoft, sharepoint_server | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-69943 | 8.8 high | 1.0% | microsoft, sharepoint_server | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 20 Oct |
| CVE-2026-88164 | 8.8 high | 1.0% | microsoft, sharepoint_server | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 20 Oct |
| CVE-2026-108452 | 8.8 high | 1.0% | microsoft, sharepoint_server | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 19 Oct |
| CVE-2025-59228 | 8.8 high | 1.0% | microsoft, sharepoint_server | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-96044 | 8.8 high | 1.0% | microsoft, sharepoint_server | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 16 Oct |
| CVE-2026-97755 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-102863 | 8.8 high | 1.0% | microsoft, sharepoint_server | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 14 Oct |
| CVE-2026-102862 | 8.8 high | 1.0% | microsoft, sharepoint_server | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 14 Oct |
50 of 131 · Next
Download these 131 as CSV · subscribe to this list.
EPSS scores: 2026-10-27. NVD cursor: 2026-10-28 21:20. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.