CVE-2026-58644

Critical KEV · actively exploited PoC available

CVSS base score

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Vendor

microsoft

Product

sharepoint server

Affected

microsoft sharepoint server

Weakness

CWE-502 · Deserialization

Published

Jul 14, 2026

Last modified

Jul 17, 2026

CVSS version

v3.1

Views

// References & exploits