CVE-2026-47294

published 2026-06-01

CVE-2026-47294: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

high 8 CVSS 3.1

AV N AC L PR L UI R S U C H I H A H

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	microsoft_sharepoint_enterprise_server_2016	>= 16.0.0 < 16.0.5552.1002	16.0.5552.1002
microsoft	microsoft_sharepoint_server_2019	>= 16.0.0 < 16.0.10417.20128	16.0.10417.20128
microsoft	microsoft_sharepoint_server_subscription_edition	>= 16.0.0 < 16.0.19725.20280	16.0.19725.20280

CWE-78