Microsoft Office SharePoint Remote Code Execution Vulnerability

Summary

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Remediation

1. Inventory every Microsoft Microsoft SharePoint Server Subscription Edition deployment, including staging.
2. Upgrade Microsoft Microsoft SharePoint Server Subscription Edition to 16.0.20326.20190.
3. Confirm the running version after the upgrade.

References

• Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105013