Patch tracker / Products / Microsoft SharePoint Server 2019

Microsoft SharePoint Server 2019: vulnerabilities and security updates

Every CVE affecting Microsoft SharePoint Server 2019 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
179
Updates (KBs)
46
Actively exploited (KEV)
12
Critical Severity
60

CVEs affecting Microsoft SharePoint Server 2019

CVESeverityCVSSEPSSStatus
CVE-2025-53770Critical9.8100%KEVRansomware
CVE-2025-49704High8.8100%KEVRansomware
CVE-2025-49706Medium6.5100%KEVRansomware
CVE-2024-38094High7.553%KEVRansomware
CVE-2026-45659High8.82.7%KEVRansomware
CVE-2026-50522Critical9.870%KEV
CVE-2026-55040Critical9.170%KEV
CVE-2026-56164Medium5.370%KEV
CVE-2026-32201Medium6.543%KEV
CVE-2026-20963Critical9.830%KEV
CVE-2026-58644Critical9.816%KEV
CVE-2026-65660High8.82.1%KEV
CVE-2025-53771Critical9.8100%-
CVE-2025-49701High8.8100%-
CVE-2025-49703High7.8100%-
CVE-2026-54108Critical9.870%-
CVE-2026-55016Critical9.870%-
CVE-2026-55019Critical9.870%-
CVE-2026-55020Critical9.870%-
CVE-2026-55023Critical9.870%-
CVE-2026-55026Critical9.870%-
CVE-2026-55027Critical9.870%-
CVE-2026-55028Critical9.870%-
CVE-2026-55030Critical9.870%-
CVE-2026-55035Critical9.870%-
CVE-2026-55047Critical9.870%-
CVE-2026-55050Critical9.870%-
CVE-2026-55051Critical9.870%-
CVE-2026-55121Critical9.870%-
CVE-2026-55124Critical9.870%-
CVE-2026-55135Critical9.870%-
CVE-2026-55142Critical9.870%-
CVE-2026-56157Critical9.870%-
CVE-2026-56192Critical9.870%-
CVE-2026-62826Critical9.870%-
CVE-2026-55052High8.870%-
CVE-2026-58277High8.870%-
CVE-2026-55045High8.470%-
CVE-2026-55032High7.870%-
CVE-2026-55033High7.870%-
CVE-2026-55038High7.870%-
CVE-2026-55055High7.870%-
CVE-2026-55125High7.870%-
CVE-2026-55127High7.870%-
CVE-2026-55128High7.870%-
CVE-2026-55130High7.870%-
CVE-2026-55132High7.870%-
CVE-2026-55134High7.870%-
CVE-2026-55021High7.370%-
CVE-2026-55034High7.370%-
CVE-2026-55126High7.370%-
CVE-2024-38018High8.851%-
CVE-2024-43466High8.851%-
CVE-2024-32987High7.553%-
CVE-2024-38023High7.253%-
CVE-2024-38024High7.253%-
CVE-2024-43464High7.251%-
CVE-2024-38227High7.251%-
CVE-2024-38228High7.251%-
CVE-2026-20945Medium6.543%-
CVE-2026-20958Critical9.830%-
CVE-2026-20959Critical9.830%-
CVE-2025-21400High8.034%-
CVE-2026-20947High8.830%-
CVE-2026-20948High7.830%-
CVE-2026-20951High7.830%-
CVE-2025-29794High8.824%-
CVE-2026-20943High7.030%-
CVE-2025-47163High8.821%-
CVE-2025-47166High8.821%-
CVE-2025-47172High8.821%-
CVE-2025-27747High7.824%-
CVE-2025-26642High7.824%-
CVE-2026-33113Critical9.816%-
CVE-2026-44821Critical9.816%-
CVE-2026-45453Critical9.816%-
CVE-2026-45454Critical9.816%-
CVE-2026-45462Critical9.816%-
CVE-2026-45464Critical9.816%-
CVE-2026-45465Critical9.816%-
CVE-2026-45467Critical9.816%-
CVE-2026-45468Critical9.816%-
CVE-2026-45479Critical9.816%-
CVE-2026-45483Critical9.816%-
CVE-2026-45485Critical9.816%-
CVE-2026-47636Critical9.816%-
CVE-2026-47637Critical9.816%-
CVE-2026-47638Critical9.816%-
CVE-2026-47639Critical9.816%-
CVE-2026-47640Critical9.816%-
CVE-2026-47641Critical9.816%-
CVE-2026-48560Critical9.816%-
CVE-2026-48562Critical9.816%-
CVE-2025-54897High8.820%-
CVE-2025-49712High8.819%-
CVE-2025-53733High8.419%-
CVE-2025-29793High7.224%-
CVE-2025-47168High7.821%-
CVE-2025-47169High7.821%-
CVE-2026-45484High8.816%-
CVE-2025-54906High7.820%-
CVE-2026-45456High8.416%-
CVE-2026-45458High8.416%-
CVE-2025-54905High7.120%-
CVE-2026-47298High8.016%-
CVE-2025-53760High7.119%-
CVE-2026-44819High7.816%-
CVE-2026-44824High7.816%-
CVE-2026-45471High7.816%-
CVE-2026-45475High7.816%-
CVE-2025-53736Medium6.819%-
CVE-2026-45481High7.316%-
CVE-2026-47634High7.316%-
CVE-2026-58639Critical9.32.1%-
CVE-2026-62829Critical9.32.1%-
CVE-2026-62837Critical9.32.1%-
CVE-2026-62839Critical9.32.1%-
CVE-2026-62917Critical9.32.1%-
CVE-2026-63512Critical9.32.1%-
CVE-2026-63516Critical9.32.1%-
CVE-2026-64897Critical9.32.1%-
CVE-2026-64902Critical9.32.1%-
CVE-2026-64916Critical9.32.1%-
CVE-2026-64922Critical9.32.1%-
CVE-2026-70306Critical9.32.1%-
CVE-2026-33110High8.82.7%-
CVE-2026-33112High8.82.7%-
CVE-2026-35439High8.82.7%-
CVE-2026-40357High8.82.7%-
CVE-2026-40365High8.82.7%-
CVE-2025-59228High8.82.5%-
CVE-2025-59237High8.82.5%-
CVE-2026-26106High8.82.3%-
CVE-2026-26114High8.82.3%-
CVE-2026-62827High8.82.1%-
CVE-2026-63514High8.82.1%-
CVE-2026-64901High8.82.1%-
CVE-2026-64921High8.82.1%-
CVE-2026-65658High8.82.1%-
CVE-2026-65663High8.82.1%-
CVE-2026-65665High8.82.1%-
CVE-2026-66805High8.82.1%-
CVE-2026-66808High8.82.1%-
CVE-2026-70324High8.82.1%-
CVE-2026-40367High8.42.7%-
CVE-2024-49064High8.23.2%-
CVE-2024-49068High8.23.2%-
CVE-2024-49062High8.23.2%-
CVE-2024-49065High8.23.2%-
CVE-2026-26113High8.42.3%-
CVE-2026-40368High8.02.7%-
CVE-2026-47294High8.02.7%-
CVE-2026-26105High8.12.3%-
CVE-2026-63520High8.12.1%-
CVE-2026-57105High8.02.1%-
CVE-2025-62204High8.02.1%-
CVE-2026-21260High7.53.9%-
CVE-2026-21511High7.53.9%-
CVE-2025-29976High7.82.5%-
CVE-2025-30382High7.82.5%-
CVE-2025-27746High7.82.5%-
CVE-2025-59222High7.82.5%-
CVE-2025-21344High7.81.8%-
CVE-2025-21393High7.81.8%-
CVE-2024-49070High7.43.2%-
CVE-2025-30384High7.42.5%-
CVE-2025-62562High7.80.8%-
CVE-2025-62558High7.80.8%-
CVE-2025-62559High7.80.8%-
CVE-2024-43503High7.80.7%-
CVE-2026-64900High7.32.1%-
CVE-2026-70355High7.32.1%-
CVE-2025-59235High7.12.5%-
CVE-2025-59232High7.12.5%-
CVE-2025-21348High7.21.8%-
CVE-2025-30378High7.02.5%-
CVE-2025-59221High7.02.5%-
CVE-2025-62555High7.00.8%-
ADV240001High---

Updates (KBs) for Microsoft SharePoint Server 2019

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50027532025-07-08Critical9.8100%2KEVRansomware
KB50027542025-07-08Critical9.8100%2KEVRansomware
KB50027412025-07-08High8.8100%4KEVRansomware
KB50026062024-07-09High7.553%4KEVRansomware
KB50026152024-07-09High7.553%4KEVRansomware
KB50026182024-07-09High7.553%4KEVRansomware
KB50028702026-05-12High8.82.7%9KEVRansomware
KB50028832026-07-14Critical9.870%39KEV
KB50028542026-04-14Medium6.543%2KEV
KB50028252026-01-13Critical9.830%7KEV
KB50028742026-07-14Critical9.816%31KEV
KB50028942026-08-11Critical9.32.1%27KEV
KB50028962026-08-11High8.82.1%26KEV
KB50026392024-09-10High8.851%5-
KB50026782025-02-11High8.034%1-
KB50026912025-04-08High8.824%4-
KB50027292025-06-10High8.821%5-
KB50027752025-09-09High8.820%3-
KB50027692025-08-12High8.819%4-
KB50028232026-01-13High8.819%2-
KB50028562026-04-14Medium4.619%1-
KB50027962025-10-14High8.82.5%6-
KB50028452026-03-10High8.82.3%4-
KB50026572024-12-10High8.23.2%5-
KB50026642024-12-10High8.23.2%4-
KB50028762026-06-09High8.40.6%8-
KB50028852026-07-14High8.40.6%22-
KB50028032025-11-11High8.02.1%1-
KB50027702025-08-12High8.40.5%2-
KB50028342026-02-10High7.53.9%2-
KB50028362026-02-10High7.53.9%2-
KB50028722026-05-12High8.40.4%1-
KB50028472026-03-10High8.40.4%1-
KB50027082025-05-13High7.82.5%4-
KB50026662025-01-14High7.81.8%3-
KB50026672025-01-14High7.81.8%3-
KB50026802025-04-08High7.80.9%2-
KB50028022025-12-09High7.80.8%4-
KB50028162025-12-09High7.80.8%4-
KB50027392025-07-08High7.80.7%1-
KB50026472024-10-08High7.80.7%1-
KB50027272025-06-10High7.80.7%2-
KB50027062025-05-13High7.80.6%1-
KB50027982025-10-14High7.80.5%2-
KB50027742025-09-09High7.10.6%1-
KB50026502024-11-12High--1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.