Patchfirst
Class familyMicrosoft · SharePoint Server

Microsoft SharePoint input validation flaws, 2019–2026

11 SharePoint Server CVEs with CWE-20 weaknesses, 5 Mar 2019 to 13 Oct 2026. 2 are in .

CVEs by year

Published each year. Select a CVE to open it.

Grouped by product and weakness type (CWE); not proven to share a root cause.

In CISA KEVNot in KEV

CVEs in this family

Table view of the years above
CVEPublishedTitleLinked fromPriority
CVE-2019-0604KEV 5 Mar 2019 Microsoft SharePoint Remote Code Execution Vulnerability Grouped by weakness 88.8
CVE-2023-24950 9 May 2023 Microsoft SharePoint Server Spoofing Vulnerability Grouped by weakness 25.1
CVE-2025-21344 14 Jan 2025 Microsoft SharePoint Server Remote Code Execution Vulnerability Grouped by weakness 17.3
CVE-2025-59228 14 Oct 2025 Microsoft SharePoint Remote Code Execution Vulnerability Grouped by weakness 20.5
CVE-2026-20951 13 Jan 2026 Microsoft SharePoint Server Remote Code Execution Vulnerability Grouped by weakness 16.7
CVE-2026-26106 10 Mar 2026 Microsoft SharePoint Server Remote Code Execution Vulnerability Grouped by weakness 20.8
CVE-2026-32201KEV 14 Apr 2026 Microsoft SharePoint Server Improper Input Validation Vulnerability Grouped by weakness 72.3
CVE-2026-47641 9 Jun 2026 Microsoft SharePoint Server Spoofing Vulnerability Grouped by weakness 11.8
CVE-2026-62917 11 Aug 2026 Microsoft SharePoint Server Spoofing Vulnerability Grouped by weakness 12.8
CVE-2026-63520 11 Aug 2026 Microsoft SharePoint Server Remote Code Execution Vulnerability Grouped by weakness 70.1
CVE-2026-105719 13 Oct 2026 Microsoft SharePoint Server Information Disclosure Vulnerability Grouped by weakness 17.6
↑ ↓ chooseEnter openEsc close