9991 matches found
CVE-2026-47294: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Description of the security update for SharePoint Server 2016: May 12, 2026 (KB5002868)
None None...
Description of the security update for SharePoint Server 2019: May 12, 2026 (KB5002870)
None None...
Description of the security update for SharePoint Server Subscription Edition: May 12, 2026 (KB5002863)
None None...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-45539
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...
Microsoft Office SharePoint Operating System Command Injection Vulnerability
Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. Microsoft Office SharePoint has a vulnerability related to operating system command injection. This vulnerability stems from deserialized untrusted data, which...
KLA91076 ACE vulnerability in Microsoft Office
A remote code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-47294 Exploitation Related products Microsoft-SharePoint CVE list CVE-2026-47294 critical KB list 5002863 5002868 5002870...
Exploit for CVE-2026-45659
CVE-2026-45659 SharePoint Deserialization RCE Overview E...
CVE-2026-45659
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to be met. The vulnerability, tracked as CVE-2026-45659 , carries a CVSS score of 8.8. It has been...
Microsoft Office SharePoint code-related vulnerabilities
Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. There is a security vulnerability present in Microsoft Office SharePoint. Attackers can exploit this vulnerability to execute code via the network...
May "In the Trend of VM" (#27): high-profile vulnerabilities in Linux, ActiveMQ, SharePoint, and Adobe Acrobat Reader
May "In the Trend of VM" 27: high-profile vulnerabilities in Linux, ActiveMQ, SharePoint, and Adobe Acrobat Reader. Presenting the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. While the previous April edition featured only one vulnerability, this one...
CVE-2026-45659
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-45659 Microsoft SharePoint Remote Code Execution Vulnerability
...
EUVD-2026-31518
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-45659
CVE-2026-45659 is a deserialization vulnerability in Microsoft SharePoint Server that enables an authorized attacker to execute code over a network. The root cause is unsafe deserialization via LosFormatter.Deserialize during processing of list items in Microsoft.SharePoint.Library, triggered by ...
CVE-2026-45659
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-45659 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-45659: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...