Patch tracker / Products / Microsoft SharePoint Server 2019

Microsoft SharePoint Server 2019: vulnerabilities and security updates

Every CVE affecting Microsoft SharePoint Server 2019 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
179
Updates (KBs)
46
Actively exploited (KEV)
12
Critical Severity
6

CVEs affecting Microsoft SharePoint Server 2019

CVESeverityCVSSEPSSStatus
CVE-2025-53770Critical9.8100%KEVRansomware
CVE-2025-49704High8.8100%KEVRansomware
CVE-2025-49706Medium6.5100%KEVRansomware
CVE-2026-45659High8.880%KEVRansomware
CVE-2024-38094High7.553%KEVRansomware
CVE-2026-50522Critical9.870%KEV
CVE-2026-55040Critical9.170%KEV
CVE-2026-56164Medium5.370%KEV
CVE-2026-58644Critical9.835%KEV
CVE-2026-32201Medium6.543%KEV
CVE-2026-20963Critical9.829%KEV
CVE-2026-65660High8.88.2%KEV
CVE-2025-49701High8.8100%-
CVE-2025-49703High7.8100%-
CVE-2025-53771Medium6.5100%-
CVE-2026-33110High8.880%-
CVE-2026-33112High8.880%-
CVE-2026-35439High8.880%-
CVE-2026-40357High8.880%-
CVE-2026-40365High8.880%-
CVE-2026-40367High8.480%-
CVE-2026-40368High8.080%-
CVE-2026-47294High8.080%-
CVE-2026-55052High8.870%-
CVE-2026-58277High8.870%-
CVE-2026-55045High8.470%-
CVE-2026-97783High8.170%-
CVE-2026-55032High7.870%-
CVE-2026-55033High7.870%-
CVE-2026-55038High7.870%-
CVE-2026-55055High7.870%-
CVE-2026-55125High7.870%-
CVE-2026-55127High7.870%-
CVE-2026-55128High7.870%-
CVE-2026-55130High7.870%-
CVE-2026-55132High7.870%-
CVE-2026-55134High7.870%-
CVE-2026-55021High7.370%-
CVE-2026-55034High7.370%-
CVE-2026-55126High7.370%-
CVE-2026-54108Medium6.570%-
CVE-2026-55051Medium6.570%-
CVE-2026-55026Medium6.270%-
CVE-2026-55023Medium5.570%-
CVE-2026-55027Medium5.570%-
CVE-2026-55028Medium5.570%-
CVE-2026-55035Medium5.570%-
CVE-2026-55047Medium5.570%-
CVE-2026-55050Medium5.570%-
CVE-2026-55121Medium5.570%-
CVE-2026-55124Medium5.570%-
CVE-2026-55142Medium5.570%-
CVE-2026-56192Medium5.570%-
CVE-2026-56157Medium5.470%-
CVE-2026-55016Medium4.670%-
CVE-2026-55019Medium4.670%-
CVE-2026-55020Medium4.670%-
CVE-2026-55030Medium4.670%-
CVE-2026-55135Medium4.670%-
CVE-2026-62826Medium4.670%-
CVE-2024-38018High8.851%-
CVE-2024-43466High8.851%-
CVE-2024-32987High7.553%-
CVE-2024-38023High7.253%-
CVE-2024-38024High7.253%-
CVE-2024-43464High7.251%-
CVE-2024-38227High7.251%-
CVE-2024-38228High7.251%-
CVE-2026-45484High8.835%-
CVE-2026-45456High8.435%-
CVE-2026-45458High8.435%-
CVE-2026-47298High8.035%-
CVE-2026-44819High7.835%-
CVE-2026-44824High7.835%-
CVE-2026-45471High7.835%-
CVE-2026-45475High7.835%-
CVE-2025-21400High8.034%-
CVE-2026-45481High7.335%-
CVE-2026-47634High7.335%-
CVE-2026-20947High8.829%-
CVE-2026-20945Medium4.643%-
CVE-2026-45454Medium6.535%-
CVE-2026-20948High7.829%-
CVE-2026-20951High7.829%-
CVE-2025-29794High8.824%-
CVE-2026-44821Medium5.535%-
CVE-2026-33113Medium5.435%-
CVE-2026-45453Medium5.435%-
CVE-2026-45464Medium5.435%-
CVE-2026-45465Medium5.435%-
CVE-2026-47636Medium5.435%-
CVE-2026-47639Medium5.435%-
CVE-2026-48560Medium5.435%-
CVE-2026-20943High7.029%-
CVE-2025-54897High8.822%-
CVE-2025-47163High8.822%-
CVE-2025-47166High8.822%-
CVE-2025-47172High8.822%-
CVE-2025-49712High8.821%-
CVE-2025-27747High7.824%-
CVE-2025-26642High7.824%-
CVE-2026-45462Medium4.635%-
CVE-2026-45467Medium4.635%-
CVE-2026-45468Medium4.635%-
CVE-2026-45479Medium4.635%-
CVE-2026-45483Medium4.635%-
CVE-2026-47637Medium4.635%-
CVE-2026-47638Medium4.635%-
CVE-2026-47640Medium4.635%-
CVE-2026-47641Medium4.635%-
CVE-2026-48562Medium4.635%-
CVE-2025-53733High8.421%-
CVE-2025-54906High7.822%-
CVE-2025-47168High7.822%-
CVE-2025-47169High7.822%-
CVE-2025-29793High7.224%-
CVE-2026-20958Medium5.429%-
CVE-2025-54905High7.122%-
CVE-2026-45485Low3.335%-
CVE-2025-53760High7.121%-
CVE-2026-20959Medium4.629%-
CVE-2025-53736Medium6.821%-
CVE-2026-70306Critical9.38.2%-
CVE-2026-62827High8.88.2%-
CVE-2026-63514High8.88.2%-
CVE-2026-64901High8.88.2%-
CVE-2026-64921High8.88.2%-
CVE-2026-65658High8.88.2%-
CVE-2026-65663High8.88.2%-
CVE-2026-65665High8.88.2%-
CVE-2026-66808High8.88.2%-
CVE-2026-70324High8.88.2%-
CVE-2026-63520High8.18.2%-
CVE-2026-57105High8.08.2%-
CVE-2026-26106High8.83.1%-
CVE-2026-26114High8.83.1%-
CVE-2026-64900High7.38.2%-
CVE-2026-70355High7.38.2%-
CVE-2025-59228High8.82.5%-
CVE-2025-59237High8.82.5%-
CVE-2026-26113High8.43.1%-
CVE-2024-49068High8.23.2%-
CVE-2026-26105High8.13.1%-
CVE-2026-58639Medium6.58.2%-
CVE-2026-62837Medium6.58.2%-
CVE-2026-62839Medium6.58.2%-
CVE-2026-63512Medium6.58.2%-
CVE-2026-63516Medium6.58.2%-
CVE-2025-62204High8.02.2%-
CVE-2026-21260High7.54.0%-
CVE-2026-21511High7.54.0%-
CVE-2025-29976High7.82.6%-
CVE-2025-30382High7.82.6%-
CVE-2025-27746High7.82.5%-
CVE-2025-59222High7.82.5%-
CVE-2025-21344High7.81.8%-
CVE-2024-49070High7.43.2%-
CVE-2025-30384High7.42.6%-
CVE-2025-62562High7.80.8%-
CVE-2025-62558High7.80.8%-
CVE-2025-62559High7.80.8%-
CVE-2024-43503High7.80.7%-
CVE-2025-59232High7.12.5%-
CVE-2025-59235High7.12.5%-
CVE-2025-30378High7.02.6%-
CVE-2025-21348High7.21.8%-
CVE-2025-59221High7.02.5%-
CVE-2024-49064Medium6.53.2%-
CVE-2024-49062Medium6.53.2%-
CVE-2025-62555High7.00.8%-
CVE-2025-21393Medium6.31.8%-
CVE-2026-62829Medium4.68.2%-
CVE-2026-62917Medium4.68.2%-
CVE-2026-64897Medium4.68.2%-
CVE-2026-64902Medium4.68.2%-
CVE-2026-64916Medium4.68.2%-
CVE-2026-64922Medium4.68.2%-
CVE-2024-49065Medium5.53.2%-
ADV240001High---

Updates (KBs) for Microsoft SharePoint Server 2019

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50027532025-07-08Critical9.8100%2KEVRansomware
KB50027542025-07-08Critical9.8100%2KEVRansomware
KB50027412025-07-08High8.8100%4KEVRansomware
KB50028702026-05-12High8.880%9KEVRansomware
KB50026062024-07-09High7.553%4KEVRansomware
KB50026152024-07-09High7.553%4KEVRansomware
KB50026182024-07-09High7.553%4KEVRansomware
KB50028832026-07-14Critical9.870%40KEV
KB50028742026-06-09Critical9.835%31KEV
KB50028542026-04-14Medium6.543%2KEV
KB50028252026-01-13Critical9.829%7KEV
KB50028942026-08-11Critical9.38.2%26KEV
KB50028962026-08-11High8.88.2%25KEV
KB50026392024-09-10High8.851%5-
KB50026782025-02-11High8.034%1-
KB50026912025-04-08High8.824%4-
KB50027752025-09-09High8.822%3-
KB50027292025-06-10High8.822%5-
KB50027692025-08-12High8.821%4-
KB50028232026-01-13High8.818%2-
KB50028562026-04-14Medium4.619%1-
KB50028452026-03-10High8.83.1%4-
KB50027962025-10-14High8.82.5%6-
KB50026572024-12-10High8.23.2%5-
KB50026642024-12-10High8.23.2%4-
KB50028032025-11-11High8.02.2%1-
KB50028852026-07-14High8.40.6%22-
KB50028342026-02-10High7.54.0%2-
KB50028362026-02-10High7.54.0%2-
KB50028472026-03-10High8.40.6%1-
KB50027702025-08-12High8.40.5%2-
KB50028762026-06-09High8.40.5%8-
KB50028722026-05-12High8.40.4%1-
KB50027082025-05-13High7.82.6%4-
KB50026662025-01-14High7.81.8%3-
KB50026672025-01-14High7.81.8%3-
KB50026802025-04-08High7.80.9%2-
KB50028022025-12-09High7.80.8%4-
KB50028162025-12-09High7.80.8%4-
KB50027392025-07-08High7.80.8%1-
KB50026472024-10-08High7.80.7%1-
KB50027272025-06-10High7.80.7%2-
KB50027062025-05-13High7.80.6%1-
KB50027982025-10-14High7.80.5%2-
KB50027742025-09-09High7.10.6%1-
KB50026502024-11-12High--1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.