CVE record · 2 sources
CVE-2026-109464
CVSS 8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- Vendor
- Microsoft
- Product
- Microsoft SharePoint Server Subscription Edition
- CVSS v3.1
- 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-502
- Exposure class
- Collaboration
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.