Microsoft SharePoint: known exploited vulnerabilities
Entries10
Ransomware-linked5
First added2021-11-03
Latest2026-09-25
EPSS compared
99.9%
99.9%
99.9%
99.0%
69.5%
50.8%
29.5%
15.8%
3.0%
2.1%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-65660 | Microsoft SharePoint | 2026-09-25 | 2.1% | Unknown |
| CVE-2026-55040 | Microsoft SharePoint | 2026-08-18 | 69.5% | Unknown |
| CVE-2026-50522 | Microsoft SharePoint | 2026-07-22 | 3.0% | Unknown |
| CVE-2026-58644 | Microsoft SharePoint | 2026-07-16 | 15.8% | Unknown |
| CVE-2026-20963 | Microsoft SharePoint | 2026-03-18 | 29.5% | Unknown |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | 99.0% | Known |
| CVE-2025-49704 | Microsoft SharePoint | 2025-07-22 | 99.9% | Known |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | 99.9% | Known |
| CVE-2024-38094 | Microsoft SharePoint | 2024-10-22 | 50.8% | Known |
| CVE-2019-0604 | Microsoft SharePoint | 2021-11-03 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.