CVE-2021-34468High· 7.1▾ Abyssal0dayMicrosoft SharePoint Server Remote Code Execution Vulnerability
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 39.1 · likelihood 0.4 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 10.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.9%
1.9% → 2.1%
Microsoft SharePoint Server Remote Code Execution Vulnerability
sharepoint_foundation = 2013sharepoint_server = 2016sharepoint_server = 2019Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2015-6117Medium· 6.1Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Mi…
CVE-2021-34520High· 8.1Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-34519Medium· 5.3Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-34517Medium· 5.3Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-62765High· 7.5Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-83831High· 8.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability