CVE-2024-38094 Microsoft SharePoint Remote Code Execution Vulnerability

🗓️ 09 Jul 2024 17:03:24Reported by microsoftType

Microsoft SharePoint Remote Code Execution Vulnerabilit

Reporter	Title	Published	Views	Family All 33
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	10 Jul 202407:00	–	githubexploit
ATTACKERKB	CVE-2024-38094	9 Jul 202400:00	–	attackerkb
Information Security Automation	The severity of the Remote Code Execution – Microsoft SharePoint (CVE-2024-38094) vulnerability has increased	27 Oct 202416:24	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.	15 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-38094	9 Jul 202419:48	–	circl
CISA KEV Catalog	Microsoft SharePoint Deserialization Vulnerability	22 Oct 202400:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	22 Oct 202412:00	–	cisa
CNNVD	Microsoft SharePoint 安全漏洞	9 Jul 202400:00	–	cnnvd
CNVD	Unspecified Vulnerability in Microsoft SharePoint (CNVD-2024-33175)	12 Jul 202400:00	–	cnvd
CVE	CVE-2024-38094	9 Jul 202417:03	–	cve

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Enterprise Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.5456.1000",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.10412.20001",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.17328.20424",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094

10 Feb 2026 23:35Current

CVSS 3.17.2

EPSS0.48735

CWE-502