Exploit for Deserialization of Untrusted Data in Microsoft

MS-SharePoint-July-Patch-...

CVE-2024-38023

creationtimestamp| type| source ---|---|--- 2024-07-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1324 2024-07-10 09:41:41+00:00| published-proof-of-concept| https://t.me/poxek/4205 2024-07-10 11:35:17+00:00| published-proof-of-concept|...

Patch Tuesday - July 2024

Microsoft is addressing 139 vulnerabilities this July 2024 Patch Tuesday, which is on the high side in terms of typical CVE counts. They’ve also republished details for 4 CVEs issued by other vendors that affect Microsoft products. Microsoft has evidence of in-the-wild exploitation for 2 of the...

CVE-2024-38023 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2024-38023

A remote code execution (RCE) vulnerability exists in Microsoft SharePoint Server due to deficiencies in the deserialization mechanism . An attacker can exploit this flaw by loading a specially crafted file remotely to execute arbitrary code on the system. This vulnerability has been observed in ...

Security Updates for Microsoft SharePoint Server Subscription Edition (July 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...

Security Updates for Microsoft SharePoint Server 2019 (July 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Security Updates for Microsoft SharePoint Server 2016 (July 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...