# Microsoft SharePoint vulnerabilities Source: https://junglewise.ai/threats/technologies/sharepoint Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/sharepoint.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 38 vulnerabilities in Microsoft SharePoint: 1 in the last 7 days and 4 in the last 90 days, 12 of them critical and 12 exploited in the wild. The most recent, CVE-2026-120000, was published on 10 November 2026. 1 vulnerability in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 1 - Last 30 days: 1 - Last 90 days: 4 - All time: 38 (12 critical, 12 exploited in the wild) ## About Microsoft SharePoint Microsoft enterprise web server and content management platform for building intranet sites and applications. ## Latest Microsoft SharePoint vulnerabilities - [CVE-2026-120000: Microsoft SharePoint deserialization code execution](https://junglewise.ai/threats/cve-2026-120000-deserialization-of-untrusted-data-in-microsoft-office-sharepoint) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-102862: Microsoft SharePoint incorrect authorization privilege escalation](https://junglewise.ai/threats/cve-2026-102862-incorrect-authorization-in-microsoft-office-sharepoint-allows-an) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-69804: Microsoft SharePoint time-of-check time-of-use race condition](https://junglewise.ai/threats/cve-2026-69804-microsoft-sharepoint-time-of-check-time-of-use-race-condition) (high, CVSS 7.5, published 8 Sep 2026) - [CVE-2026-69724: Microsoft SharePoint missing authorization in code execution](https://junglewise.ai/threats/cve-2026-69724-microsoft-sharepoint-missing-authorization-in-code-execution) (high, CVSS 8.8, published 8 Sep 2026) - [CVE-2026-65660: Microsoft SharePoint code injection](https://junglewise.ai/threats/cve-2026-65660-microsoft-sharepoint-code-injection) (critical, exploited in the wild, CVSS 8.8, published 11 Aug 2026) - [CVE-2026-55040: Microsoft SharePoint weak authentication security feature bypass](https://junglewise.ai/threats/cve-2026-55040-microsoft-sharepoint-weak-authentication-security-feature-bypass) (critical, exploited in the wild, CVSS 9.1, published 14 Jul 2026) - [CVE-2026-58644: Microsoft SharePoint remote code execution via untrusted deserialization](https://junglewise.ai/threats/cve-2026-58644-microsoft-sharepoint-remote-code-execution-via-untrusted) (critical, exploited in the wild, CVSS 9.8, published 14 Jul 2026) - [CVE-2026-50522: Microsoft SharePoint remote code execution via unsafe deserialization](https://junglewise.ai/threats/cve-2026-50522-microsoft-sharepoint-remote-code-execution-via-unsafe) (critical, exploited in the wild, CVSS 9.8, published 14 Jul 2026) - [CVE-2026-48562: Microsoft Office SharePoint Cross-Site Scripting](https://junglewise.ai/threats/cve-2026-48562-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 4.6, published 9 Jun 2026) - [CVE-2026-48560: Microsoft Office SharePoint cross-site scripting and spoofing](https://junglewise.ai/threats/cve-2026-48560-microsoft-office-sharepoint-cross-site-scripting-and-spoofing) (medium, CVSS 5.4, published 9 Jun 2026) - [CVE-2026-47641: Microsoft Office SharePoint XSS in web page generation](https://junglewise.ai/threats/cve-2026-47641-microsoft-office-sharepoint-xss-in-web-page-generation) (medium, CVSS 4.6, published 9 Jun 2026) - [CVE-2026-47640: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-47640-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 4.6, published 9 Jun 2026) - [CVE-2026-47639: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-47639-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 5.4, published 9 Jun 2026) - [CVE-2026-47638: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-47638-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 4.6, published 9 Jun 2026) - [CVE-2026-47637: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-47637-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 4.6, published 9 Jun 2026) - [CVE-2026-47636: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-47636-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 5.4, published 9 Jun 2026) - [CVE-2026-47634: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-47634-microsoft-office-sharepoint-cross-site-scripting) (high, CVSS 7.3, published 9 Jun 2026) - [CVE-2026-47298: Microsoft Office SharePoint improper authorization code execution](https://junglewise.ai/threats/cve-2026-47298-microsoft-office-sharepoint-improper-authorization-code-execution) (high, CVSS 8, published 9 Jun 2026) - [CVE-2026-45484: Microsoft Office SharePoint privilege escalation via deserialization](https://junglewise.ai/threats/cve-2026-45484-microsoft-office-sharepoint-privilege-escalation-via) (high, CVSS 8.8, published 9 Jun 2026) - [CVE-2026-45481: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-45481-microsoft-office-sharepoint-cross-site-scripting) (high, CVSS 7.3, published 9 Jun 2026) - [CVE-2026-45479: Microsoft Office SharePoint Cross-Site Scripting](https://junglewise.ai/threats/cve-2026-45479-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 4.6, published 9 Jun 2026) - [CVE-2026-45468: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-45468-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 4.6, published 9 Jun 2026) - [CVE-2026-45467: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-45467-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 4.6, published 9 Jun 2026) - [CVE-2026-45465: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-45465-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 5.4, published 9 Jun 2026) - [CVE-2026-45464: Microsoft Office SharePoint cross-site scripting](https://junglewise.ai/threats/cve-2026-45464-microsoft-office-sharepoint-cross-site-scripting) (medium, CVSS 5.4, published 9 Jun 2026) ## Most severe Microsoft SharePoint vulnerabilities - [CVE-2025-53770: Microsoft SharePoint Server deserialization of untrusted data](https://junglewise.ai/threats/cve-2025-53770-microsoft-sharepoint-server-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 9.8, published 20 Jul 2025) - [CVE-2026-50522: Microsoft SharePoint remote code execution via unsafe deserialization](https://junglewise.ai/threats/cve-2026-50522-microsoft-sharepoint-remote-code-execution-via-unsafe) (critical, exploited in the wild, CVSS 9.8, published 14 Jul 2026) - [CVE-2026-20963: Microsoft SharePoint deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-20963-microsoft-sharepoint-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 9.8, published 18 Mar 2026) - [CVE-2026-58644: Microsoft SharePoint remote code execution via untrusted deserialization](https://junglewise.ai/threats/cve-2026-58644-microsoft-sharepoint-remote-code-execution-via-untrusted) (critical, exploited in the wild, CVSS 9.8, published 14 Jul 2026) - [CVE-2019-0604: Microsoft SharePoint Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2019-0604-microsoft-sharepoint-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2026-55040: Microsoft SharePoint weak authentication security feature bypass](https://junglewise.ai/threats/cve-2026-55040-microsoft-sharepoint-weak-authentication-security-feature-bypass) (critical, exploited in the wild, CVSS 9.1, published 14 Jul 2026) - [CVE-2025-49704: Microsoft SharePoint code injection vulnerability](https://junglewise.ai/threats/cve-2025-49704-microsoft-sharepoint-code-injection-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 22 Jul 2025) - [CVE-2026-45659: Microsoft Office SharePoint deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-45659-microsoft-office-sharepoint-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 8.8, published 22 May 2026) - [CVE-2026-65660: Microsoft SharePoint code injection](https://junglewise.ai/threats/cve-2026-65660-microsoft-sharepoint-code-injection) (critical, exploited in the wild, CVSS 8.8, published 11 Aug 2026) - [CVE-2024-38094: Microsoft SharePoint Deserialization Vulnerability](https://junglewise.ai/threats/cve-2024-38094-microsoft-sharepoint-deserialization-vulnerability) (critical, exploited in the wild, CVSS 7.2, published 22 Oct 2024) ## Vulnerabilities per week 1 vulnerability in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 2 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## Other Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows): 2,362 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities - [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft SharePoint vulnerabilities", https://junglewise.ai/threats/technologies/sharepoint, 13 November 2026.