Microsoft SharePoint Server Remote Code Execution Vulnerability

A vulnerability in Microsoft SharePoint Server allows an attacker to execute malicious code remotely on the server. An authenticated user can exploit this flaw to take control of the system and compromise sensitive data.

This CWE-94 (Improper Control of Generation of Code) vulnerability enables remote code execution through SharePoint Server's code generation mechanism. An authenticated attacker can craft malicious input that bypasses validation controls, leading to arbitrary code execution with server privileges and potential lateral movement within the network.