Browse CVEs

HIGH 8.0 CVE-2026-40368 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20280+ Fix from $1,9502026-05-12 HIGH 8.8 CVE-2026-35439 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20280+ Fix from $1,9502026-05-12 HIGH 8.8 CVE-2026-40357 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20280+ Fix from $1,9502026-05-12 HIGH 8.8 CVE-2026-33110 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20280+ Fix from $1,9502026-05-12 HIGH 8.8 CVE-2026-33112 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20280+ Fix from $1,9502026-05-12 CRITICAL 9.8 CVE-2026-33819 Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network. Bing Mitigation only Fix from $2,3002026-04-23 HIGH 7.8 CVE-2026-32192 Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Azure Monitor Agent 1.41.0+ Fix from $1,9502026-04-14 HIGH 7.8 CVE-2026-32184 Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an authorized attacker to elevate privileges locally. Hpc Pack 6.3.8355+ Fix from $1,9502026-04-14 HIGH 8.8 CVE-2026-26114 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server Mitigation only Fix from $1,9502026-03-10 HIGH 7.8 CVE-2026-25166 Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally. Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 CRITICAL 9.8 CVE-2026-21531 Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network. Azure Conversation Authoring Client Library Mitigation only Fix from $2,3002026-02-10 HIGH 7.5 CVE-2026-21511 Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. 365 Apps 16.0.19127.20518+ Fix from $1,9502026-02-10 HIGH 7.5 CVE-2026-21226 Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network. Azure Core Shared Client Library 1.38.0+ Fix from $1,9502026-01-13 CRITICAL 9.8 CVE-2026-20963 KEVEPSS 32% Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. Sharepoint Server 16.0.19127.20442+ Fix from $2,3002026-01-13 CRITICAL 9.8 CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability Sharepoint Online No fix yet Fix from $2,3002025-11-20 HIGH 8.0 CVE-2025-62204 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19127.20338+ Fix from $1,9502025-11-11 CRITICAL 9.8 CVE-2025-59287 KEVEPSS 100% Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network. Windows Server 2012 10.0.14393.8524 / 10.0.17763.7922+ Fix from $2,3002025-10-14 HIGH 7.0 CVE-2025-59285 Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Azure Monitor Agent 1.36.3+ Fix from $1,9502025-10-14 HIGH 8.8 CVE-2025-59237 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19127.20262+ Fix from $1,9502025-10-14 CRITICAL 9.8 CVE-2025-55232 Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network. Hpc Pack 6.3.8352+ Fix from $2,3002025-09-09 HIGH 8.8 CVE-2025-54897EPSS 19% Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19127.20100+ Fix from $1,9502025-09-09 HIGH 8.8 CVE-2025-53772EPSS 22% Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network. Web Deploy 4.0 10.0.2001+ Fix from $1,9502025-08-12 HIGH 8.8 CVE-2025-49712EPSS 18% Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server Mitigation only Fix from $1,9502025-08-12 CRITICAL 9.8 CVE-2025-53770 KEVEPSS 100% Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsof… Sharepoint Server 16.0.18526.20508+ Fix from $2,3002025-07-20 HIGH 8.6 CVE-2025-47994 Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally. 365 Apps Mitigation only Fix from $1,9502025-07-08 HIGH 8.8 CVE-2025-47166EPSS 15% Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Enterprise Server 16.0.18526.20396+ Fix from $1,9502025-06-10 HIGH 8.8 CVE-2025-47163EPSS 15% Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Enterprise Server 16.0.18526.20396+ Fix from $1,9502025-06-10 HIGH 7.0 CVE-2025-30384 Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. Sharepoint Server 16.0.18526.20286+ Fix from $1,9502025-05-13 HIGH 7.8 CVE-2025-30382 Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. Sharepoint Server 16.0.18526.20286+ Fix from $1,9502025-05-13 HIGH 7.0 CVE-2025-30378 Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. Sharepoint Server 16.0.18526.20286+ Fix from $1,9502025-05-13