CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability
HighCVSS 8.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft SharePoint Enterprise Server 2016 | >= 16.0.0, < 16.0.5565.1001 | 16.0.5565.1001 |
| Microsoft SharePoint Server 2019 | >= 16.0.0, < 16.0.10417.20198 | 16.0.10417.20198 |
| Microsoft SharePoint Server Subscription Edition | >= 16.0.0, < 16.0.19725.20522 | 16.0.19725.20522 |
| Microsoft sharepoint server | < 16.0.19725.20522 | 16.0.19725.20522 |
| Microsoft sharepoint server | = 2016 | No fix listed |
| Microsoft sharepoint server | = 2019 | No fix listed |
| Microsoft sharepoint server 2016 | < 16.0.5565.1001 | 16.0.5565.1001 |
| Microsoft sharepoint server 2019 | < 16.0.10417.20198 | 16.0.10417.20198 |