Class familyMicrosoft · SharePoint Server
Microsoft SharePoint missing authentication flaws, 2023–2026
3 SharePoint Server CVEs with CWE-306 weaknesses, 10 Jan 2023 to 11 Aug 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2023’23
2024’24
2025’25
2 2026’26
In CISA KEVNot in KEV
20231 CVE
20262 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2023-21743 | 10 Jan 2023 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | Grouped by weakness | 17.1 |
| CVE-2026-56164KEV | 14 Jul 2026 | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | Grouped by weakness | 67.5 |
| CVE-2026-64921 | 11 Aug 2026 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Grouped by weakness | 18.3 |