7.4
High
CVE-2026-105013 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a…
Description
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft SharePoint Server Subscription Edition 16.0 | 16.0.0 → < 16.0.20326.20190 | 16.0.20326.20190 |
References
- Microsoft Office SharePoint Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft SharePoint Server Subscription Edition
The 272 CVEs of Microsoft SharePoint Server Subscription Edition →
CVE-2026-108452
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows…
8.8
High
CVE-2026-88164
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network
8.8
High
CVE-2026-96044
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network
8.8
High
CVE-2026-88166
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a…
8.8
High