CVE-2024-38094: Microsoft SharePoint Deserialization Vulnerability

High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2024-10-22. EPSS: 50.9% chance of exploitation in the next 30 days.

Microsoft SharePoint Remote Code Execution Vulnerability

Affected products

• Microsoft SharePoint Server: affected versions not specified; version 2016 only; version 2019 only

Published 2024-07-09. Last modified 2026-06-17.