Actively exploited in the wild
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft - SharePoint · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-0604
CriticalCVSS 9.8KEVSummary
Microsoft SharePoint has a remote code execution vulnerability when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.
Risk Assessment
An attacker can execute arbitrary code on the SharePoint server, potentially leading to server compromise, data theft, and content integrity violation.
Recommendation
Apply security updates provided by Microsoft for SharePoint. Restrict access to SharePoint to trusted users only.
Other vulnerabilities in Microsoft SharePoint
See all- CVE-2026-45659HighActively exploited
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code remotely over a network.
- CVE-2024-38094HighActively exploited
A vulnerability in Microsoft SharePoint allows for remote code execution. The NVD description does not provide technical details or attack vectors.
- CVE-2023-33157High
A vulnerability in Microsoft SharePoint allows for remote code execution, potentially leading to unauthorized access to the system.
- CVE-2020-1102High
Remote code execution vulnerability in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.
- CVE-2020-1024High
A remote code execution vulnerability in Microsoft SharePoint due to failure to check the source markup of application packages. An attacker could exploit it by uploading a specially crafted SharePoint application package. The update corrects how SharePoint checks source markup.
- CVE-2020-1023High
A remote code execution vulnerability in Microsoft SharePoint due to failure to check the source markup of application packages. An attacker could exploit it by uploading a specially crafted SharePoint application package. The update corrects how SharePoint checks source markup.
Original NVD description (English source)
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.