Class familyMicrosoft · SharePoint
Microsoft SharePoint deserialization flaws, 2023–2026
48 SharePoint CVEs with CWE-502 weaknesses, 10 Jan 2023 to 13 Oct 2026. 6 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
4 2023’23
9 2024’24
12 2025’25
23 2026’26
In CISA KEVNot in KEV
20234 CVEs
20249 CVEs, 1 in KEV
202512 CVEs, 1 in KEV
202623 CVEs, 4 in KEV
- CVE-2026-20963
- CVE-2026-26114
- CVE-2026-33110
- CVE-2026-33112
- CVE-2026-35439
- CVE-2026-40357
- CVE-2026-40368
- CVE-2026-45659
- CVE-2026-45484
- CVE-2026-48560
- CVE-2026-50522
- CVE-2026-58644
- CVE-2026-63514
- CVE-2026-63516
- CVE-2026-64901
- CVE-2026-65658
- CVE-2026-65663
- CVE-2026-65665
- CVE-2026-66805
- CVE-2026-66808
- CVE-2026-70321
- CVE-2026-105013
- CVE-2026-85900
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2023-21744 | 10 Jan 2023 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 23.6 |
| CVE-2023-33134 | 11 Jul 2023 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 23.2 |
| CVE-2023-33160 | 11 Jul 2023 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 24.4 |
| CVE-2023-38177 | 14 Nov 2023 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.0 |
| CVE-2024-21318 | 9 Jan 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 25.8 |
| CVE-2024-30044 | 14 May 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 26.6 |
| CVE-2024-38023 | 9 Jul 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 59.8 |
| CVE-2024-38024 | 9 Jul 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 59.8 |
| CVE-2024-38094KEV | 9 Jul 2024 | Microsoft SharePoint Deserialization Vulnerability | Grouped by weakness | 72.8 |
| CVE-2024-38018 | 10 Sep 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 25.9 |
| CVE-2024-43464 | 10 Sep 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 24.7 |
| CVE-2024-43466 | 10 Sep 2024 | Microsoft SharePoint Server Denial of Service Vulnerability | Grouped by weakness | 22.8 |
| CVE-2024-49070 | 10 Dec 2024 | Microsoft SharePoint Remote Code Execution Vulnerability | Grouped by weakness | 21.8 |
| CVE-2025-29793 | 8 Apr 2025 | Microsoft SharePoint Remote Code Execution Vulnerability | Grouped by weakness | 24.6 |
| CVE-2025-30378 | 13 May 2025 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 19.5 |
| CVE-2025-30382 | 13 May 2025 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.5 |
| CVE-2025-30384 | 13 May 2025 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 19.6 |
| CVE-2025-47163 | 10 Jun 2025 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 25.7 |
| CVE-2025-47166 | 10 Jun 2025 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 30.7 |
| CVE-2025-53770KEV | 20 Jul 2025 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Grouped by weakness | 86.0 |
| CVE-2025-49712 | 12 Aug 2025 | Microsoft SharePoint Remote Code Execution Vulnerability | Grouped by weakness | 25.7 |
| CVE-2025-54897 | 9 Sep 2025 | Microsoft SharePoint Remote Code Execution Vulnerability | Grouped by weakness | 25.7 |
| CVE-2025-59237 | 14 Oct 2025 | Microsoft SharePoint Remote Code Execution Vulnerability | Grouped by weakness | 23.0 |
| CVE-2025-62204 | 11 Nov 2025 | Microsoft SharePoint Remote Code Execution Vulnerability | Grouped by weakness | 22.1 |
| CVE-2025-59245 | 20 Nov 2025 | Microsoft SharePoint Online Elevation of Privilege Vulnerability | Grouped by weakness | 20.1 |
| CVE-2026-20963KEV | 13 Jan 2026 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Grouped by weakness | 69.5 |
| CVE-2026-26114 | 10 Mar 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 28.7 |
| CVE-2026-33110 | 12 May 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.2 |
| CVE-2026-33112 | 12 May 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 25.8 |
| CVE-2026-35439 | 12 May 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.4 |
| CVE-2026-40357 | 12 May 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 21.6 |
| CVE-2026-40368 | 12 May 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 21.3 |
| CVE-2026-45659KEV | 22 May 2026 | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | Grouped by weakness | 84.1 |
| CVE-2026-45484 | 9 Jun 2026 | Microsoft SharePoint Elevation of Privilege Vulnerability | Grouped by weakness | 25.8 |
| CVE-2026-48560 | 9 Jun 2026 | Microsoft SharePoint Server Spoofing Vulnerability | Grouped by weakness | 15.9 |
| CVE-2026-50522KEV | 14 Jul 2026 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Grouped by weakness | 72.4 |
| CVE-2026-58644KEV | 14 Jul 2026 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Grouped by weakness | 74.2 |
| CVE-2026-63514 | 11 Aug 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.4 |
| CVE-2026-63516 | 11 Aug 2026 | Microsoft SharePoint Server Spoofing Vulnerability | Grouped by weakness | 20.4 |
| CVE-2026-64901 | 11 Aug 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.4 |
| CVE-2026-65658 | 11 Aug 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.4 |
| CVE-2026-65663 | 11 Aug 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.4 |
| CVE-2026-65665 | 11 Aug 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 21.6 |
| CVE-2026-66805 | 11 Aug 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.4 |
| CVE-2026-66808 | 11 Aug 2026 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Grouped by weakness | 22.4 |
| CVE-2026-70321 | 11 Aug 2026 | Microsoft SharePoint Remote Code Execution Vulnerability | Grouped by weakness | 21.6 |
| CVE-2026-105013 | 13 Oct 2026 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Grouped by weakness | 17.4 |
| CVE-2026-85900 | 13 Oct 2026 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Grouped by weakness | 21.1 |