CVE Catalog

CVE-2026-66808

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.58%

73th percentile - higher than 73% of all known CVEs

Summary

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Risk Assessment

An authorized attacker could remotely execute code on the SharePoint server, potentially leading to service takeover.

Recommendation

Apply security patches provided by Microsoft for SharePoint.

Original NVD description (English source)

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS