Microsoft SharePoint Server Subscription Edition
cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*
A remote code execution vulnerability has been identified in Microsoft Office SharePoint. This issue arises from the deserialization of untrusted data, allowing an authorized attacker to execute code over the network. The vulnerability affects multiple SharePoint products, including SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.
Exploitation of this vulnerability allows for remote code execution on the affected system.
Users can download the security update for their respective SharePoint version from the Microsoft Update Catalog. Instructions for applying the update are available in the corresponding Knowledge Base articles.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.