Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server has a flaw where it processes untrusted data without proper verification, allowing an authorized user to run malicious code on the server remotely.

A deserialization vulnerability in Microsoft Office SharePoint processes untrusted serialized objects without validation. An authenticated attacker can craft malicious payloads to achieve remote code execution with the privileges of the SharePoint process. The vulnerability requires valid credentials but no additional user interaction.