CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,204 CVEs published, 247 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,204
Show in the list
Critical, last 7 days
247
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,760
Show in the list

Showing CVEs that name the product microsoft:sharepoint_enterprise_server_2016. Show all products

133 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2023-24955
Known exploited
High 7.2Microsoft SharePoint Server Remote Code Execution Vulnerability
Assigned by microsoft
May 9, 2023
CVE-2024-38094
Known exploited
High 7.2Microsoft SharePoint Remote Code Execution Vulnerability
Assigned by microsoft
Jul 9, 2024
CVE-2025-49704
Known exploited
High 8.8Microsoft SharePoint Remote Code Execution Vulnerability
Assigned by microsoft
Jul 8, 2025
CVE-2025-49706
Known exploited
Medium 6.5Microsoft SharePoint Server Spoofing Vulnerability
Assigned by microsoft
Jul 8, 2025
CVE-2025-53770
Known exploited
Critical 9.8Microsoft SharePoint Server Remote Code Execution Vulnerability
Assigned by microsoft
Jul 19, 2025
CVE-2025-54897High 8.8Microsoft SharePoint Remote Code Execution Vulnerability
Assigned by microsoft
Sep 9, 2025
CVE-2025-59228High 8.8Microsoft SharePoint Remote Code Execution Vulnerability
Assigned by microsoft
Oct 14, 2025
CVE-2025-59235High 7.1Microsoft Excel Information Disclosure Vulnerability
Assigned by microsoft
Oct 14, 2025
CVE-2025-59237High 8.8Microsoft SharePoint Remote Code Execution Vulnerability
Assigned by microsoft
Oct 14, 2025
CVE-2025-59221High 7.0Microsoft Word Remote Code Execution Vulnerability
Assigned by microsoft
Oct 14, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.