Patch tracker / Products / Microsoft SharePoint Server Subscription Edition

Microsoft SharePoint Server Subscription Edition: vulnerabilities and security updates

Every CVE affecting Microsoft SharePoint Server Subscription Edition and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
174
Updates (KBs)
28
Actively exploited (KEV)
11
Critical Severity
60

CVEs affecting Microsoft SharePoint Server Subscription Edition

CVESeverityCVSSEPSSStatus
CVE-2025-53770Critical9.8100%KEVRansomware
CVE-2025-49706Medium6.5100%KEVRansomware
CVE-2024-38094High7.553%KEVRansomware
CVE-2026-45659High8.82.7%KEVRansomware
CVE-2026-50522Critical9.870%KEV
CVE-2026-55040Critical9.170%KEV
CVE-2026-56164Medium5.370%KEV
CVE-2026-32201Medium6.543%KEV
CVE-2026-20963Critical9.830%KEV
CVE-2026-58644Critical9.816%KEV
CVE-2026-65660High8.82.1%KEV
CVE-2025-53771Critical9.8100%-
CVE-2025-49701High8.8100%-
CVE-2026-54108Critical9.870%-
CVE-2026-55016Critical9.870%-
CVE-2026-55019Critical9.870%-
CVE-2026-55020Critical9.870%-
CVE-2026-55023Critical9.870%-
CVE-2026-55026Critical9.870%-
CVE-2026-55027Critical9.870%-
CVE-2026-55028Critical9.870%-
CVE-2026-55030Critical9.870%-
CVE-2026-55035Critical9.870%-
CVE-2026-55047Critical9.870%-
CVE-2026-55050Critical9.870%-
CVE-2026-55051Critical9.870%-
CVE-2026-55121Critical9.870%-
CVE-2026-55124Critical9.870%-
CVE-2026-55135Critical9.870%-
CVE-2026-55142Critical9.870%-
CVE-2026-56157Critical9.870%-
CVE-2026-56192Critical9.870%-
CVE-2026-62826Critical9.870%-
CVE-2026-55052High8.870%-
CVE-2026-55045High8.470%-
CVE-2026-55032High7.870%-
CVE-2026-55033High7.870%-
CVE-2026-55038High7.870%-
CVE-2026-55055High7.870%-
CVE-2026-55125High7.870%-
CVE-2026-55127High7.870%-
CVE-2026-55128High7.870%-
CVE-2026-55130High7.870%-
CVE-2026-55132High7.870%-
CVE-2026-55134High7.870%-
CVE-2026-55021High7.370%-
CVE-2026-55034High7.370%-
CVE-2026-55126High7.370%-
CVE-2024-38018High8.851%-
CVE-2024-43466High8.851%-
CVE-2024-32987High7.553%-
CVE-2024-38023High7.253%-
CVE-2024-38024High7.253%-
CVE-2024-43464High7.251%-
CVE-2024-38227High7.251%-
CVE-2024-38228High7.251%-
CVE-2026-20945Medium6.543%-
CVE-2026-20958Critical9.830%-
CVE-2026-20959Critical9.830%-
CVE-2025-21400High8.034%-
CVE-2026-20947High8.830%-
CVE-2026-20951High7.830%-
CVE-2025-29794High8.824%-
CVE-2026-20943High7.030%-
CVE-2025-47163High8.821%-
CVE-2025-47166High8.821%-
CVE-2025-47172High8.821%-
CVE-2026-33113Critical9.816%-
CVE-2026-44821Critical9.816%-
CVE-2026-45453Critical9.816%-
CVE-2026-45454Critical9.816%-
CVE-2026-45462Critical9.816%-
CVE-2026-45464Critical9.816%-
CVE-2026-45465Critical9.816%-
CVE-2026-45467Critical9.816%-
CVE-2026-45468Critical9.816%-
CVE-2026-45479Critical9.816%-
CVE-2026-45483Critical9.816%-
CVE-2026-45485Critical9.816%-
CVE-2026-47636Critical9.816%-
CVE-2026-47637Critical9.816%-
CVE-2026-47638Critical9.816%-
CVE-2026-47639Critical9.816%-
CVE-2026-47640Critical9.816%-
CVE-2026-47641Critical9.816%-
CVE-2026-48560Critical9.816%-
CVE-2026-48562Critical9.816%-
CVE-2025-54897High8.820%-
CVE-2025-29793High7.224%-
CVE-2026-45484High8.816%-
CVE-2026-45456High8.416%-
CVE-2026-45458High8.416%-
CVE-2026-47298High8.016%-
CVE-2025-53760High7.119%-
CVE-2026-44819High7.816%-
CVE-2026-44824High7.816%-
CVE-2026-45471High7.816%-
CVE-2026-45475High7.816%-
CVE-2026-45481High7.316%-
CVE-2026-47634High7.316%-
CVE-2026-58639Critical9.32.1%-
CVE-2026-62829Critical9.32.1%-
CVE-2026-62837Critical9.32.1%-
CVE-2026-62839Critical9.32.1%-
CVE-2026-62917Critical9.32.1%-
CVE-2026-63512Critical9.32.1%-
CVE-2026-63516Critical9.32.1%-
CVE-2026-64897Critical9.32.1%-
CVE-2026-64902Critical9.32.1%-
CVE-2026-64916Critical9.32.1%-
CVE-2026-64922Critical9.32.1%-
CVE-2026-70306Critical9.32.1%-
CVE-2026-33110High8.82.7%-
CVE-2026-33112High8.82.7%-
CVE-2026-35439High8.82.7%-
CVE-2026-40357High8.82.7%-
CVE-2026-40365High8.82.7%-
CVE-2025-59228High8.82.5%-
CVE-2025-59237High8.82.5%-
CVE-2026-26106High8.82.3%-
CVE-2026-62827High8.82.1%-
CVE-2026-63514High8.82.1%-
CVE-2026-64901High8.82.1%-
CVE-2026-64921High8.82.1%-
CVE-2026-65658High8.82.1%-
CVE-2026-65663High8.82.1%-
CVE-2026-65665High8.82.1%-
CVE-2026-66805High8.82.1%-
CVE-2026-66808High8.82.1%-
CVE-2026-70321High8.82.1%-
CVE-2026-70324High8.82.1%-
CVE-2026-70326High8.82.1%-
CVE-2026-40367High8.42.7%-
CVE-2025-64672High8.81.0%-
CVE-2026-69268High8.81.0%-
CVE-2026-69273High8.81.0%-
CVE-2026-69282High8.81.0%-
CVE-2026-69409High8.81.0%-
CVE-2026-69464High8.81.0%-
CVE-2026-69465High8.81.0%-
CVE-2026-69615High8.81.0%-
CVE-2026-69636High8.81.0%-
CVE-2026-69683High8.81.0%-
CVE-2026-69690High8.81.0%-
CVE-2026-69716High8.81.0%-
CVE-2026-69724High8.81.0%-
CVE-2026-69904High8.81.0%-
CVE-2024-49064High8.23.2%-
CVE-2024-49068High8.23.2%-
CVE-2024-49062High8.23.2%-
CVE-2026-26113High8.42.3%-
CVE-2026-40368High8.02.7%-
CVE-2026-47294High8.02.7%-
CVE-2026-26105High8.12.3%-
CVE-2026-63520High8.12.1%-
CVE-2026-57105High8.02.1%-
CVE-2025-62204High8.02.1%-
CVE-2026-21260High7.53.9%-
CVE-2026-21511High7.53.9%-
CVE-2025-29976High7.82.5%-
CVE-2025-30382High7.82.5%-
CVE-2025-21344High7.81.8%-
CVE-2025-21393High7.81.8%-
CVE-2024-49070High7.43.2%-
CVE-2025-30384High7.42.5%-
CVE-2024-43503High7.80.7%-
CVE-2026-64900High7.32.1%-
CVE-2026-70355High7.32.1%-
CVE-2026-69804High7.51.0%-
CVE-2025-21348High7.21.8%-
CVE-2025-30378High7.02.5%-
CVE-2026-69402High7.31.0%-
CVE-2026-69417High7.31.0%-
ADV240001High---

Updates (KBs) for Microsoft SharePoint Server Subscription Edition

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50027682025-07-08Critical9.8100%2KEVRansomware
KB50027512025-07-08High8.899%2KEVRansomware
KB50026062024-07-09High7.553%4KEVRansomware
KB50026152024-07-09High7.553%4KEVRansomware
KB50026182024-07-09High7.553%4KEVRansomware
KB50028632026-05-12High8.82.7%9KEVRansomware
KB50028822026-07-14Critical9.870%38KEV
KB50028532026-04-14Medium6.543%2KEV
KB50028222026-01-13Critical9.830%6KEV
KB50028732026-07-14Critical9.816%31KEV
KB50028932026-08-11Critical9.32.1%29KEV
KB50026402024-09-10High8.851%5-
KB50026812025-02-11High8.034%1-
KB50027052025-04-08High8.824%2-
KB50027362025-06-10High8.821%3-
KB50027842025-09-09High8.820%1-
KB50027732025-08-12High7.116%1-
KB50027862025-10-14High8.82.5%2-
KB50028432026-03-10High8.81.3%3-
KB50028152025-12-09High8.81.0%1-
KB50029082026-09-08High8.81.0%16-
KB50026582024-12-10High8.23.2%4-
KB50028002025-11-11High8.02.1%1-
KB50028332026-02-10High7.53.9%2-
KB50027092025-05-13High7.82.5%4-
KB50026762025-01-14High7.81.8%3-
KB50026492024-10-08High7.80.7%1-
KB50026512024-11-12High--1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.