CVE-2023-33157
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
A vulnerability in Microsoft SharePoint allows for remote code execution, potentially leading to unauthorized access to the system.
Risk Assessment
Exploitation of this vulnerability could result in serious consequences, including data loss and system takeover.
Recommendation
It is recommended to immediately apply available patches and monitor the system for unauthorized activities.
Other vulnerabilities in Microsoft SharePoint
See all- CVE-2026-45659HighActively exploited
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code remotely over a network.
- CVE-2020-1102High
Remote code execution vulnerability in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.
- CVE-2020-1024High
A remote code execution vulnerability in Microsoft SharePoint due to failure to check the source markup of application packages. An attacker could exploit it by uploading a specially crafted SharePoint application package. The update corrects how SharePoint checks source markup.
- CVE-2020-1023High
A remote code execution vulnerability in Microsoft SharePoint due to failure to check the source markup of application packages. An attacker could exploit it by uploading a specially crafted SharePoint application package. The update corrects how SharePoint checks source markup.
Original NVD description (English source)
Microsoft SharePoint Remote Code Execution Vulnerability