Microsoft SharePoint Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Microsoft Office SharePoint. This issue arises from improper input validation, which allows an unauthorized attacker to execute code locally. The vulnerability affects multiple SharePoint server versions, including the Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can download the security update for Microsoft SharePoint Server Subscription Edition, SharePoint Server 2019, or SharePoint Enterprise Server 2016 from the Microsoft Update Catalog. Instructions for applying the update are available in the respective Knowledge Base articles.

Added: Jan 13, 2026, 7:09 PM
Updated: Jan 13, 2026, 7:09 PM

Vulnerability Rating

Custom Algorithm
spread
5.7
impact
7.5
exploitability
4.6
remediation
7.7
relevance
2.1
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.