CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft SharePoint Weak Authentication Bypass Vulnerability (CVE-2026-55040) Security Advisory
[Affected Scope] Microsoft SharePoint Server on-premises deployments
[Impact] Unauthenticated remote attackers can bypass security features over the network to access sensitive data or escalate privileges
[Mitigation] Apply the official Microsoft security updates immediately and restrict external network exposure until patched
Microsoft SharePoint Server Remote Code Execution (RCE) Vulnerability Advisory (CVE-2026-58644, CWE-502)
[Affected Scope] Microsoft SharePoint Server deployments
[Impact] Unauthorized remote attackers can execute arbitrary code over the network and fully compromise the system
[Mitigation] Apply the official Microsoft security updates immediately and restrict external network exposure
Microsoft Office SharePoint Missing Authentication Privilege Escalation Vulnerability (CVE-2026-56164) Security Advisory
[Affected Scope] Microsoft Office SharePoint Server environments
[Impact] Unauthenticated remote attackers can bypass authentication mechanisms over the network to elevate privileges to administrative levels
[Mitigation] Immediately apply the official Microsoft security patches and restrict external network access to SharePoint management endpoints
Microsoft SharePoint Remote Code Execution (RCE) Vulnerability Advisory (CVE-2026-50522, CWE-502)
[Affected Scope] Microsoft SharePoint Server deployments
[Impact] Unauthenticated remote attackers can execute arbitrary code over the network and fully compromise the host server
[Mitigation] Apply the official Microsoft security updates immediately, and restrict network access to SharePoint endpoints until patched
Microsoft SharePoint Remote Code Execution (RCE) Vulnerability Advisory (CVE-2026-20963, CWE-502)
[Affected Scope] Microsoft SharePoint Server deployments
[Impact] Unauthenticated remote attackers can execute arbitrary code over the network and gain full control of the target server.
[Mitigation] Apply the official Microsoft security patches immediately and restrict external access to SharePoint web interfaces until patched.
Microsoft SharePoint Server Elevation of Privilege Vulnerability (CVE-2023-29357) Security Advisory
[Affected Scope] Microsoft SharePoint Server 2019 and SharePoint Server Subscription Edition.
[Impact] An unauthenticated attacker can send a specially crafted JWT token to bypass authentication, gain administrator privileges, and potentially chain it with RCE vulnerabilities.
[Mitigation] Apply the official Microsoft Cumulative Update (CU) immediately and restrict unauthorized access at the network and IIS levels prior to patching.