CVE-2024-38094: high-severity vulnerability in Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A vulnerability in Microsoft SharePoint allows attackers to execute arbitrary code on the server. An attacker with access to SharePoint can exploit unsafe deserialization to run malicious commands with the same privileges as the SharePoint service.
CWE-502 (Deserialization of Untrusted Data) allows unauthenticated or low-privileged attackers to achieve remote code execution via crafted serialized objects. The vulnerability requires network access to a vulnerable SharePoint instance and results in code execution within the SharePoint process context (CVSS 7.2).
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.