Microsoft SharePoint Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft Office SharePoint. This issue arises from the deserialization of untrusted data, allowing an authorized attacker to execute code over the network. The vulnerability affects multiple SharePoint products, including SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected SharePoint server.

Remediation

Users can download the security update for their specific SharePoint version. For SharePoint Server Subscription Edition, the update is available as part of the May 2026 security updates. SharePoint Server 2019 users can also find the security update through the Microsoft Update Catalog. For SharePoint Enterprise Server 2016, the security update is available via the Microsoft Update Catalog as well.