CVE record · 2 sources
CVE-2026-45659
KEVMicrosoft SharePoint Server Deserialization of Untrusted Data Vulnerability
- Vendor
- Microsoft
- Product
- SharePoint Server
- EPSS
- 0.43 (p99)
- CISA KEV
- listed
- Exposure class
- Collaboration
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.
-
CISA Urges SharePoint Hardening After New Exploitations
Update July 16, 2026 : CISA has updated this Alert to reflect the addition of CVE-2026-58644 to its Known Exploited Vulnerabilities (KEV) Catalog on July 16, 2026. CISA is aware of active exploitation of vulnerabilities…
-
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability This…