Actively exploited in the wild
Microsoft SharePoint Server Privilege Escalation Vulnerability
Microsoft - SharePoint Server · Listed in the CISA KEV since 2024-01-10. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-29357
CriticalCVSS 9.8KEVSummary
Elevation of Privilege vulnerability in Microsoft SharePoint Server. Technical details are not provided in the description.
Risk Assessment
An attacker could gain higher privileges within the SharePoint environment, potentially leading to unauthorized access to data and administrative functions.
Recommendation
Apply the latest security updates for Microsoft SharePoint Server. Monitor for unusual privilege-related activity.
Other vulnerabilities in Microsoft SharePoint Server
See all- CVE-2017-8569High
Microsoft SharePoint Server has an elevation of privilege vulnerability due to improper sanitization of a specially crafted web request to an affected SharePoint server.
- CVE-2025-53770CriticalActively exploited
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware of an exploit in the wild and is preparing an update.
- CVE-2023-33160High
A vulnerability in Microsoft SharePoint Server allows remote code execution by an attacker. Exploiting this flaw could lead to system takeover.
- CVE-2023-24955HighActively exploited
Microsoft SharePoint Server Remote Code Execution Vulnerability.
- CVE-2021-34467High
Vulnerability in Microsoft SharePoint Server allows remote code execution. An attacker could exploit it to run arbitrary code on the SharePoint server.
- CVE-2021-34519Medium
Information disclosure vulnerability in Microsoft SharePoint Server. An attacker could exploit this flaw to gain access to information that should be protected.
- CVE-2021-27076High
Remote Code Execution vulnerability in Microsoft SharePoint Server. Details are not provided in the description.
- CVE-2020-1069High
A remote code execution vulnerability in Microsoft SharePoint Server due to failure to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker could exploit it by creating a specially crafted page. The update corrects how SharePoint Server handles processing of created content.
- CVE-2023-36894Medium
A vulnerability in Microsoft SharePoint Server allows for information disclosure, potentially leading to unauthorized access to sensitive data.
- CVE-2023-36892High
A vulnerability in Microsoft SharePoint Server allows for spoofing, which may lead to unauthorized access to user data. An attacker can exploit this flaw to impersonate a trusted source.
Original NVD description (English source)
Microsoft SharePoint Server Elevation of Privilege Vulnerability