CVE-2026-105013
CVE-2026-105013 · Microsoft Office SharePoint Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 7.4 · High · EPSS 1.0% · Fix available
- Published
- Updated
Affected products and versions
microsoft sharepoint server subscription edition
- Versions
- ≥ 16.0.0, < 16.0.20326.20190: Affected (custom)
Update to 16.0.20326.20190