Microsoft SharePoint Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Microsoft Office SharePoint. This issue arises from the deserialization of untrusted data, allowing an authorized attacker to execute code over the network. The vulnerability affects several versions of Microsoft SharePoint Server, including SharePoint Server 2019 and SharePoint Enterprise Server 2016.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected SharePoint server.

Remediation

Users can download the security update for Microsoft SharePoint Server 2019 from the Microsoft Update Catalog. For SharePoint Enterprise Server 2016, the security update is also available through the Microsoft Update Catalog.

Added: Mar 10, 2026, 7:11 PM
Updated: Mar 10, 2026, 7:11 PM

Vulnerability Rating

Custom Algorithm
spread
5.7
impact
10.0
exploitability
4.3
remediation
7.7
relevance
3.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.