Fixes 9 records
Priority CRITICAL 97KEV
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.80242 · Published 2026-05-22 · Fixed in 16.0.5552.1002, 16.0.10417.20128 +1 CWE-502
Priority MEDIUM 64
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.31124 · Published 2026-05-12 · Fixed in 16.0.5552.1002, 16.0.10417.20128 +1 CWE-502
Priority MEDIUM 44
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02032 · Published 2026-05-12 · Fixed in 16.0.5552.1002, 16.0.10417.20128 +1 CWE-502
Priority MEDIUM 44
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01967 · Published 2026-05-12 · Fixed in 16.0.5552.1002, 16.0.10417.20128 +1 CWE-502
Priority MEDIUM 43
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01698 · Published 2026-05-12 · Fixed in 16.0.5552.1002, 16.0.10417.20128 +1 CWE-502
Priority MEDIUM 42
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00961 · Published 2026-05-12 · Fixed in 16.0.5552.1002, 16.0.10417.20128 +1 CWE-1220
Priority MEDIUM 40
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01818 · Published 2026-05-12 · Fixed in 16.0.5552.1002, 16.0.10417.20128 +1 CWE-502
Priority LOW 39
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00453 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +4 CWE-822
Priority LOW 38
Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00609 · Published 2026-06-01 · Fixed in 16.0.5552.1002, 16.0.10417.20128 +1 CWE-78
THREATIST.IORead the docs