Patch tracker / Products / Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Server Subscription Edition: vulnerabilities and security updates
Every CVE affecting Microsoft SharePoint Server Subscription Edition and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.
CVEs
139
Updates (KBs)
77
Actively exploited (KEV)
9
Critical Severity
74
CVEs affecting Microsoft SharePoint Server Subscription Edition
| CVE | Severity | CVSS | EPSS | Status |
|---|---|---|---|---|
| CVE-2025-53770 | Critical | 9.8 | 100% | KEVRansomware |
| CVE-2025-49704 | High | 8.8 | 100% | KEVRansomware |
| CVE-2025-49706 | High | 8.8 | 100% | KEVRansomware |
| CVE-2024-38094 | High | 7.5 | 53% | KEVRansomware |
| CVE-2026-56164 | Critical | 9.8 | 76% | KEV |
| CVE-2026-50522 | Critical | 9.8 | 76% | KEV |
| CVE-2026-58644 | Critical | 9.8 | 35% | KEV |
| CVE-2026-32201 | Medium | 6.5 | 25% | KEV |
| CVE-2026-45659 | High | 8.8 | 9.1% | KEV |
| CVE-2025-53771 | Critical | 9.8 | 100% | - |
| CVE-2025-49701 | High | 8.8 | 100% | - |
| CVE-2025-49703 | High | 8.8 | 100% | - |
| CVE-2026-54108 | Critical | 9.8 | 76% | - |
| CVE-2026-55016 | Critical | 9.8 | 76% | - |
| CVE-2026-55019 | Critical | 9.8 | 76% | - |
| CVE-2026-55020 | Critical | 9.8 | 76% | - |
| CVE-2026-55021 | Critical | 9.8 | 76% | - |
| CVE-2026-55023 | Critical | 9.8 | 76% | - |
| CVE-2026-55030 | Critical | 9.8 | 76% | - |
| CVE-2026-55125 | Critical | 9.8 | 76% | - |
| CVE-2026-55026 | Critical | 9.8 | 76% | - |
| CVE-2026-55034 | Critical | 9.8 | 76% | - |
| CVE-2026-55027 | Critical | 9.8 | 76% | - |
| CVE-2026-55028 | Critical | 9.8 | 76% | - |
| CVE-2026-55047 | Critical | 9.8 | 76% | - |
| CVE-2026-55045 | Critical | 9.8 | 76% | - |
| CVE-2026-55032 | Critical | 9.8 | 76% | - |
| CVE-2026-55033 | Critical | 9.8 | 76% | - |
| CVE-2026-55124 | Critical | 9.8 | 76% | - |
| CVE-2026-55127 | Critical | 9.8 | 76% | - |
| CVE-2026-55035 | Critical | 9.8 | 76% | - |
| CVE-2026-55055 | Critical | 9.8 | 76% | - |
| CVE-2026-55038 | Critical | 9.8 | 76% | - |
| CVE-2026-55132 | Critical | 9.8 | 76% | - |
| CVE-2026-55126 | Critical | 9.8 | 76% | - |
| CVE-2026-55051 | Critical | 9.8 | 76% | - |
| CVE-2026-55134 | Critical | 9.8 | 76% | - |
| CVE-2026-55040 | Critical | 9.8 | 76% | - |
| CVE-2026-55142 | Critical | 9.8 | 76% | - |
| CVE-2026-55128 | Critical | 9.8 | 76% | - |
| CVE-2026-55130 | Critical | 9.8 | 76% | - |
| CVE-2026-55052 | Critical | 9.8 | 76% | - |
| CVE-2026-55135 | Critical | 9.8 | 76% | - |
| CVE-2026-56157 | Critical | 9.8 | 76% | - |
| CVE-2026-56192 | Critical | 9.8 | 76% | - |
| CVE-2026-55121 | Critical | 9.8 | 76% | - |
| CVE-2026-62826 | Critical | 9.8 | 76% | - |
| CVE-2026-55050 | Critical | 9.8 | 76% | - |
| CVE-2026-58277 | Critical | 9.8 | 76% | - |
| CVE-2024-38018 | High | 8.8 | 51% | - |
| CVE-2024-43464 | High | 8.8 | 51% | - |
| CVE-2024-38227 | High | 8.8 | 51% | - |
| CVE-2024-38228 | High | 8.8 | 51% | - |
| CVE-2024-43466 | High | 8.8 | 51% | - |
| CVE-2024-38023 | High | 7.5 | 53% | - |
| CVE-2024-38024 | High | 7.5 | 53% | - |
| CVE-2024-32987 | High | 7.5 | 53% | - |
| CVE-2026-45467 | Critical | 9.8 | 35% | - |
| CVE-2026-45468 | Critical | 9.8 | 35% | - |
| CVE-2026-45475 | Critical | 9.8 | 35% | - |
| CVE-2026-45471 | Critical | 9.8 | 35% | - |
| CVE-2026-45479 | Critical | 9.8 | 35% | - |
| CVE-2026-45485 | Critical | 9.8 | 35% | - |
| CVE-2026-45483 | Critical | 9.8 | 35% | - |
| CVE-2026-44819 | Critical | 9.8 | 35% | - |
| CVE-2026-44821 | Critical | 9.8 | 35% | - |
| CVE-2026-44824 | Critical | 9.8 | 35% | - |
| CVE-2026-45453 | Critical | 9.8 | 35% | - |
| CVE-2026-45456 | Critical | 9.8 | 35% | - |
| CVE-2026-45458 | Critical | 9.8 | 35% | - |
| CVE-2026-47298 | Critical | 9.8 | 35% | - |
| CVE-2026-47636 | Critical | 9.8 | 35% | - |
| CVE-2026-47637 | Critical | 9.8 | 35% | - |
| CVE-2026-47638 | Critical | 9.8 | 35% | - |
| CVE-2026-47639 | Critical | 9.8 | 35% | - |
| CVE-2026-47641 | Critical | 9.8 | 35% | - |
| CVE-2026-33113 | Critical | 9.8 | 35% | - |
| CVE-2026-45454 | Critical | 9.8 | 35% | - |
| CVE-2026-45462 | Critical | 9.8 | 35% | - |
| CVE-2026-45464 | Critical | 9.8 | 35% | - |
| CVE-2026-45465 | Critical | 9.8 | 35% | - |
| CVE-2026-47634 | Critical | 9.8 | 35% | - |
| CVE-2026-47640 | Critical | 9.8 | 35% | - |
| CVE-2026-45481 | Critical | 9.8 | 35% | - |
| CVE-2026-45484 | Critical | 9.8 | 35% | - |
| CVE-2026-48560 | Critical | 9.8 | 35% | - |
| CVE-2026-48562 | Critical | 9.8 | 35% | - |
| CVE-2026-20947 | Critical | 9.8 | 29% | - |
| CVE-2026-20948 | Critical | 9.8 | 29% | - |
| CVE-2025-21400 | High | 8.0 | 34% | - |
| CVE-2025-29793 | High | 8.8 | 22% | - |
| CVE-2025-29794 | High | 8.8 | 22% | - |
| CVE-2025-53760 | High | 8.8 | 18% | - |
| CVE-2025-53733 | High | 8.8 | 18% | - |
| CVE-2025-53736 | High | 8.8 | 18% | - |
| CVE-2025-49712 | High | 8.8 | 18% | - |
| CVE-2025-54897 | High | 8.8 | 18% | - |
| CVE-2025-54905 | High | 8.8 | 18% | - |
| CVE-2025-54906 | High | 8.8 | 18% | - |
| CVE-2026-20945 | Medium | 6.5 | 25% | - |
| CVE-2025-47163 | High | 8.8 | 14% | - |
| CVE-2025-47166 | High | 8.8 | 14% | - |
| CVE-2025-47168 | High | 8.8 | 14% | - |
| CVE-2025-47169 | High | 8.8 | 14% | - |
| CVE-2025-47172 | High | 8.8 | 14% | - |
| CVE-2026-35439 | High | 8.8 | 9.1% | - |
| CVE-2026-40368 | High | 8.8 | 9.1% | - |
| CVE-2026-33110 | High | 8.8 | 9.1% | - |
| CVE-2026-33112 | High | 8.8 | 9.1% | - |
| CVE-2026-40357 | High | 8.8 | 9.1% | - |
| CVE-2026-40365 | High | 8.8 | 9.1% | - |
| CVE-2026-40367 | High | 8.8 | 9.1% | - |
| CVE-2026-47294 | High | 8.8 | 9.1% | - |
| CVE-2026-26105 | High | 8.8 | 3.0% | - |
| CVE-2026-26113 | High | 8.8 | 3.0% | - |
| CVE-2026-26106 | High | 8.8 | 3.0% | - |
| CVE-2026-26114 | High | 8.8 | 3.0% | - |
| CVE-2025-59228 | High | 8.8 | 2.3% | - |
| CVE-2025-59237 | High | 8.8 | 2.3% | - |
| CVE-2025-59235 | High | 8.8 | 2.3% | - |
| CVE-2025-59221 | High | 8.8 | 2.3% | - |
| CVE-2025-59222 | High | 8.8 | 2.3% | - |
| CVE-2025-59232 | High | 8.8 | 2.3% | - |
| CVE-2024-49064 | High | 8.2 | 3.3% | - |
| CVE-2024-49068 | High | 8.2 | 3.3% | - |
| CVE-2024-49070 | High | 8.2 | 3.3% | - |
| CVE-2024-49062 | High | 8.2 | 3.3% | - |
| CVE-2024-49065 | High | 8.2 | 3.3% | - |
| CVE-2025-64672 | High | 8.8 | 1.0% | - |
| CVE-2025-62204 | High | 8.0 | 2.0% | - |
| CVE-2025-29976 | High | 7.8 | 2.3% | - |
| CVE-2025-30378 | High | 7.8 | 2.3% | - |
| CVE-2025-30382 | High | 7.8 | 2.3% | - |
| CVE-2025-30384 | High | 7.8 | 2.3% | - |
| CVE-2025-21344 | High | 7.8 | 1.8% | - |
| CVE-2025-21348 | High | 7.8 | 1.8% | - |
| CVE-2025-21393 | High | 7.8 | 1.8% | - |
| CVE-2024-43503 | High | 7.8 | 0.7% | - |
| ADV240001 | High | - | - | - |
Updates (KBs) for Microsoft SharePoint Server Subscription Edition
| Update | Released | Severity | CVSS | EPSS | CVEs | Status |
|---|---|---|---|---|---|---|
| KB5002753 | 2025-07-08 | Critical | 9.8 | 100% | 2 | KEVRansomware |
| KB5002754 | 2025-07-08 | Critical | 9.8 | 100% | 2 | KEVRansomware |
| KB5002759 | 2025-07-08 | Critical | 9.8 | 100% | 2 | KEVRansomware |
| KB5002760 | 2025-07-08 | Critical | 9.8 | 100% | 2 | KEVRansomware |
| KB5002768 | 2025-07-08 | Critical | 9.8 | 100% | 2 | KEVRansomware |
| KB5002741 | 2025-07-08 | High | 8.8 | 100% | 4 | KEVRansomware |
| KB5002744 | 2025-07-08 | High | 8.8 | 100% | 4 | KEVRansomware |
| KB5002751 | 2025-07-08 | High | 8.8 | 100% | 2 | KEVRansomware |
| KB5002606 | 2024-07-09 | High | 7.5 | 53% | 4 | KEVRansomware |
| KB5002615 | 2024-07-09 | High | 7.5 | 53% | 4 | KEVRansomware |
| KB5002618 | 2024-07-09 | High | 7.5 | 53% | 4 | KEVRansomware |
| KB5002882 | 2026-07-14 | Critical | 9.8 | 76% | 38 | KEV |
| KB5002883 | 2026-07-14 | Critical | 9.8 | 76% | 39 | KEV |
| KB5002891 | 2026-07-14 | Critical | 9.8 | 76% | 39 | KEV |
| KB5002873 | 2026-07-14 | Critical | 9.8 | 35% | 31 | KEV |
| KB5002874 | 2026-07-14 | Critical | 9.8 | 35% | 31 | KEV |
| KB5002880 | 2026-07-14 | Critical | 9.8 | 35% | 30 | KEV |
| KB5002853 | 2026-04-14 | Medium | 6.5 | 25% | 2 | KEV |
| KB5002854 | 2026-04-14 | Medium | 6.5 | 25% | 2 | KEV |
| KB5002861 | 2026-04-14 | Medium | 6.5 | 25% | 2 | KEV |
| KB5002863 | 2026-05-12 | High | 8.8 | 9.1% | 9 | KEV |
| KB5002868 | 2026-05-12 | High | 8.8 | 9.1% | 9 | KEV |
| KB5002870 | 2026-05-12 | High | 8.8 | 9.1% | 9 | KEV |
| KB5002624 | 2024-09-10 | High | 8.8 | 51% | 5 | - |
| KB5002639 | 2024-09-10 | High | 8.8 | 51% | 5 | - |
| KB5002640 | 2024-09-10 | High | 8.8 | 51% | 5 | - |
| KB5002678 | 2025-02-11 | High | 8.0 | 34% | 1 | - |
| KB5002681 | 2025-02-11 | High | 8.0 | 34% | 1 | - |
| KB5002685 | 2025-02-11 | High | 8.0 | 34% | 1 | - |
| KB5002705 | 2025-04-08 | High | 8.8 | 22% | 2 | - |
| KB5002769 | 2025-08-12 | High | 8.8 | 18% | 4 | - |
| KB5002771 | 2025-08-12 | High | 8.8 | 18% | 4 | - |
| KB5002775 | 2025-09-09 | High | 8.8 | 18% | 3 | - |
| KB5002778 | 2025-09-09 | High | 8.8 | 18% | 3 | - |
| KB5002784 | 2025-09-09 | High | 8.8 | 18% | 1 | - |
| KB5002823 | 2026-01-13 | High | 8.8 | 18% | 2 | - |
| KB5002827 | 2026-01-13 | High | 8.8 | 18% | 2 | - |
| KB5002729 | 2025-06-10 | High | 8.8 | 14% | 5 | - |
| KB5002732 | 2025-06-10 | High | 8.8 | 14% | 5 | - |
| KB5002736 | 2025-06-10 | High | 8.8 | 14% | 3 | - |
| KB5002856 | 2026-04-14 | Medium | 4.6 | 25% | 1 | - |
| KB5002862 | 2026-04-14 | Medium | 4.6 | 25% | 1 | - |
| KB5002773 | 2025-08-12 | High | 7.1 | 12% | 1 | - |
| KB5002845 | 2026-03-10 | High | 8.8 | 3.0% | 4 | - |
| KB5002850 | 2026-03-10 | High | 8.8 | 3.0% | 4 | - |
| KB5002786 | 2025-10-14 | High | 8.8 | 2.3% | 2 | - |
| KB5002788 | 2025-10-14 | High | 8.8 | 2.3% | 6 | - |
| KB5002796 | 2025-10-14 | High | 8.8 | 2.3% | 6 | - |
| KB5002843 | 2026-03-10 | High | 8.8 | 1.4% | 3 | - |
| KB5002544 | 2024-12-10 | High | 8.2 | 3.3% | 4 | - |
| KB5002657 | 2024-12-10 | High | 8.2 | 3.3% | 5 | - |
| KB5002658 | 2024-12-10 | High | 8.2 | 3.3% | 4 | - |
| KB5002659 | 2024-12-10 | High | 8.2 | 3.3% | 5 | - |
| KB5002664 | 2024-12-10 | High | 8.2 | 3.3% | 4 | - |
| KB5002815 | 2025-12-09 | High | 8.8 | 1.0% | 1 | - |
| KB5002847 | 2026-03-10 | High | 8.4 | 0.5% | 1 | - |
| KB5002848 | 2026-03-10 | High | 8.4 | 0.5% | 1 | - |
| KB5002851 | 2026-03-10 | High | 8.4 | 0.5% | 1 | - |
| KB5002800 | 2025-11-11 | High | 8.0 | 2.0% | 1 | - |
| KB5002803 | 2025-11-11 | High | 8.0 | 2.0% | 1 | - |
| KB5002805 | 2025-11-11 | High | 8.0 | 2.0% | 1 | - |
| KB5002708 | 2025-05-13 | High | 7.8 | 2.3% | 4 | - |
| KB5002709 | 2025-05-13 | High | 7.8 | 2.3% | 4 | - |
| KB5002722 | 2025-05-13 | High | 7.8 | 2.3% | 4 | - |
| KB5002666 | 2025-01-14 | High | 7.8 | 1.8% | 3 | - |
| KB5002667 | 2025-01-14 | High | 7.8 | 1.8% | 3 | - |
| KB5002671 | 2025-01-14 | High | 7.8 | 1.8% | 3 | - |
| KB5002672 | 2025-01-14 | High | 7.8 | 1.8% | 3 | - |
| KB5002676 | 2025-01-14 | High | 7.8 | 1.8% | 3 | - |
| KB5002645 | 2024-10-08 | High | 7.8 | 0.7% | 1 | - |
| KB5002647 | 2024-10-08 | High | 7.8 | 0.7% | 1 | - |
| KB5002649 | 2024-10-08 | High | 7.8 | 0.7% | 1 | - |
| KB5002706 | 2025-05-13 | High | 7.8 | 0.6% | 1 | - |
| KB5002712 | 2025-05-13 | High | 7.8 | 0.6% | 1 | - |
| KB5002650 | 2024-11-12 | High | - | - | 1 | - |
| KB5002651 | 2024-11-12 | High | - | - | 1 | - |
| KB5002654 | 2024-11-12 | High | - | - | 1 | - |
Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.
Most searched on Senserva right now
KB5099540: the full CVE list
KB5094123 download and what it fixes
KB5099538 download and what it fixes
CVE-2026-50522 patch and risk
CVE-2026-48282: how to fix it
KB5099539 download and what it fixes
KB5101001: the full CVE list
CVE-2026-55255 patch and risk
CVE-2008-4250 patch and risk
CVE-2007-3010: severity and the patch