CVE record · 5 sources
CVE-2026-58644
KEVCVSS 9.9Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- Vendor
- Microsoft
- Product
- SharePoint
- CVSS
- 9.9
- EPSS
- 0.43 (p99)
- CISA KEV
- listed
- Exposure class
- Collaboration, Endpoint security
Coverage
6Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.
-
CISA Urges SharePoint Hardening After New Exploitations
Update July 16, 2026 : CISA has updated this Alert to reflect the addition of CVE-2026-58644 to its Known Exploited Vulnerabilities (KEV) Catalog on July 16, 2026. CISA is aware of active exploitation of vulnerabilities…
-
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-39808…
-
The July 2026 Security Update Review
Well folks. Here we are. The bug apocalypse has fully descended upon us. I’ll do my best to sort this out in some way meaningful, but this month’s release shows us the nay-sayers were right, and I’ve got to hand it to the…
-
CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability
Corrected the Exploitability Index, Exploited flag and CVSS vector which was incorrect at the time of publication on 7/14/2026. This is an informational change only.
-
July 2026 CVE Landscape
In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a Very Critical Recorded Future Risk Score. This represents a 44% increase from last month.