Vulnerability index

Browse CVEs

119 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Deserialization of Untrusted DataCWE-502 × clear
Sharepoint Server HIGH 8.0
CVE-2026-40368

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20280+
Fix from $1,950 2026-05-12
Sharepoint Server HIGH 8.8
CVE-2026-35439

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20280+
Fix from $1,950 2026-05-12
Sharepoint Server HIGH 8.8
CVE-2026-40357

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20280+
Fix from $1,950 2026-05-12
Sharepoint Server HIGH 8.8
CVE-2026-33110

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20280+
Fix from $1,950 2026-05-12
Sharepoint Server HIGH 8.8
CVE-2026-33112

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20280+
Fix from $1,950 2026-05-12
Bing CRITICAL 9.8
CVE-2026-33819

Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.

Mitigation only
Fix from $2,300 2026-04-23
Azure Monitor Agent HIGH 7.8
CVE-2026-32192

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Fix: 1.41.0+
Fix from $1,950 2026-04-14
Hpc Pack HIGH 7.8
CVE-2026-32184

Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an authorized attacker to elevate privileges locally.

Fix: 6.3.8355+
Fix from $1,950 2026-04-14
Sharepoint Server HIGH 8.8
CVE-2026-26114

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Mitigation only
Fix from $1,950 2026-03-10
Windows 10 1607 HIGH 7.8
CVE-2026-25166

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.

Fix: 10.0.14393.8957 / 10.0.17763.8511+
Fix from $1,950 2026-03-10
Azure Conversation Authoring Client Library CRITICAL 9.8
CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.

Mitigation only
Fix from $2,300 2026-02-10
365 Apps HIGH 7.5
CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Fix: 16.0.19127.20518+
Fix from $1,950 2026-02-10
Azure Core Shared Client Library HIGH 7.5
CVE-2026-21226

Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network.

Fix: 1.38.0+
Fix from $1,950 2026-01-13
Sharepoint Server CRITICAL 9.8
CVE-2026-20963 KEVEPSS 32%

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Fix: 16.0.19127.20442+
Fix from $2,300 2026-01-13
Sharepoint Online CRITICAL 9.8
CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability

No fix yet
Fix from $2,300 2025-11-20
Sharepoint Server HIGH 8.0
CVE-2025-62204

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19127.20338+
Fix from $1,950 2025-11-11
Windows Server 2012 CRITICAL 9.8
CVE-2025-59287 KEVEPSS 100%

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Fix: 10.0.14393.8524 / 10.0.17763.7922+
Fix from $2,300 2025-10-14
Azure Monitor Agent HIGH 7.0
CVE-2025-59285

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Fix: 1.36.3+
Fix from $1,950 2025-10-14
Sharepoint Server HIGH 8.8
CVE-2025-59237

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19127.20262+
Fix from $1,950 2025-10-14
Hpc Pack CRITICAL 9.8
CVE-2025-55232

Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network.

Fix: 6.3.8352+
Fix from $2,300 2025-09-09
Sharepoint Server HIGH 8.8
CVE-2025-54897EPSS 19%

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19127.20100+
Fix from $1,950 2025-09-09
Web Deploy 4.0 HIGH 8.8
CVE-2025-53772EPSS 22%

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.

Fix: 10.0.2001+
Fix from $1,950 2025-08-12
Sharepoint Server HIGH 8.8
CVE-2025-49712EPSS 18%

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Mitigation only
Fix from $1,950 2025-08-12
Sharepoint Server CRITICAL 9.8
CVE-2025-53770 KEVEPSS 100%

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsof…

Fix: 16.0.18526.20508+
Fix from $2,300 2025-07-20
365 Apps HIGH 8.6
CVE-2025-47994

Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.

Mitigation only
Fix from $1,950 2025-07-08
Sharepoint Enterprise Server HIGH 8.8
CVE-2025-47166EPSS 15%

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.18526.20396+
Fix from $1,950 2025-06-10
Sharepoint Enterprise Server HIGH 8.8
CVE-2025-47163EPSS 15%

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.18526.20396+
Fix from $1,950 2025-06-10
Sharepoint Server HIGH 7.0
CVE-2025-30384

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

Fix: 16.0.18526.20286+
Fix from $1,950 2025-05-13
Sharepoint Server HIGH 7.8
CVE-2025-30382

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

Fix: 16.0.18526.20286+
Fix from $1,950 2025-05-13
Sharepoint Server HIGH 7.0
CVE-2025-30378

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

Fix: 16.0.18526.20286+
Fix from $1,950 2025-05-13