CVE Catalog
CVE-2026-65658
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk1.15%
64th percentile - higher than 64% of all known CVEs
Summary
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Risk Assessment
An authorized attacker can remotely execute arbitrary code on the SharePoint server, potentially leading to server takeover and data access.
Recommendation
Apply security patches provided by Microsoft for SharePoint and restrict trust in input data.
Original NVD description (English source)
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.