Microsoft SharePoint Remote Code Execution Vulnerability via Deserialization of Untrusted Data

A remote code execution vulnerability has been identified in Microsoft Office SharePoint. This issue arises from the deserialization of untrusted data, allowing an unauthorized attacker to execute code locally. The vulnerability affects multiple SharePoint server versions, including the Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog.