vulnerability

Microsoft SharePoint: CVE-2018-0916: Microsoft SharePoint Elevation of Privilege Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:C/I:C/A:C)

Published

Mar 14, 2018

Added

May 15, 2023

Modified

Sep 9, 2025

Description

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912, CVE-2018-0913 CVE-2018-0914, CVE-2018-0915, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923, CVE-2018-0944 and CVE-2018-0947.

Solution

microsoft-sharepoint-sharepoint_2016-kb4018293

References

CVE-2018-0916
https://attackerkb.com/topics/CVE-2018-0916
CWE-79
https://support.microsoft.com/help/4018293

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report