SharePoint — Zero Day Initiative — Blog

The April 2025 Security Update Review

April 08, 2025 | Dustin Childs CONTINUE READING
CVE-2024-30043: Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud
Blog post

CVE-2024-30043: Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud

CVE-2021-26420: Remote Code Execution in SharePoint via Workflow Compilation
Blog post

CVE-2021-26420: Remote Code Execution in SharePoint via Workflow Compilation

CVE-2021-28474: SharePoint Remote Code Execution via Server-Side Control Interpretation Conflict
Blog post

CVE-2021-28474: SharePoint Remote Code Execution via Server-Side Control Interpretation Conflict

CVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability
Blog post

CVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint
Blog post

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

CVE-2020-1181: SharePoint Remote Code Execution Through Web Parts
Blog post

CVE-2020-1181: SharePoint Remote Code Execution Through Web Parts

CVE-2020-0932: Remote Code Execution on Microsoft SharePoint Using TypeConverters
Blog post

CVE-2020-0932: Remote Code Execution on Microsoft SharePoint Using TypeConverters

Looking Back at the Impact of CVE-2019-0604: A SharePoint RCE
Blog post

Looking Back at the Impact of CVE-2019-0604: A SharePoint RCE

CVE-2019-1257: Code Execution on Microsoft SharePoint Through BDC Deserialization
Blog post

CVE-2019-1257: Code Execution on Microsoft SharePoint Through BDC Deserialization

CVE-2019-0604: Details of a Microsoft SharePoint RCE Vulnerability
Blog post

CVE-2019-0604: Details of a Microsoft SharePoint RCE Vulnerability