Is itCheck something

Attack list

SharePoint

16 attacked bugs

Yes. Attackers are using SharePoint bugs right now.

What to do

Ask whoever runs it (your web host or IT team) to install the vendor's latest security update now.

Attackers keep using these against anything that hasn't updated. Updating closes them.

BugConfirmed in attacks

  1. A flaw in Microsoft SharePoint lets attackers run codeCVE-2026-65660Sep 25, 2026
  2. Microsoft SharePoint bug: weak authenticationCVE-2026-55040Aug 18, 2026
  3. Microsoft SharePoint bug: deserialization of untrusted data vulnerabilityCVE-2026-50522Jul 22, 2026
  4. Microsoft SharePoint bug: deserialization of untrusted dataCVE-2026-58644Jul 16, 2026
  5. Microsoft SharePoint Server bug: missing authentication for critical functionCVE-2026-56164Jul 14, 2026
  6. Microsoft SharePoint Server bug: deserialization of untrusted dataCVE-2026-45659Jul 1, 2026
  7. Microsoft SharePoint Server bug: improper input validationCVE-2026-32201Apr 14, 2026
  8. Microsoft SharePoint bug: deserialization of untrusted dataCVE-2026-20963Mar 18, 2026
  9. Microsoft SharePoint bug: code injectionCVE-2025-49704Jul 22, 2025
  10. Microsoft SharePoint bug: improper authenticationCVE-2025-49706Jul 22, 2025
  11. Microsoft SharePoint bug: deserialization of untrusted dataCVE-2025-53770Jul 20, 2025
  12. Microsoft SharePoint bug: deserializationCVE-2024-38094Oct 22, 2024
  13. Microsoft SharePoint Server bug: code injectionCVE-2023-24955Mar 26, 2024
  14. Microsoft SharePoint Server bug: privilege escalationCVE-2023-29357Jan 10, 2024
  15. Microsoft SharePoint bug: remote code executionCVE-2019-0604Nov 3, 2021
  16. Microsoft .NET Framework, SharePoint, Visual Studio bug: framework, sharepoint, and visual studio remote code executionCVE-2020-1147Nov 3, 2021

From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.