CVE Catalog

CVE-2026-70321

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.25%

67th percentile - higher than 67% of all known CVEs

Summary

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Risk Assessment

An authorized attacker can remotely execute arbitrary code on the server, potentially leading to full system compromise and data access.

Recommendation

Update Microsoft Office SharePoint to the latest version containing the security fix.

Original NVD description (English source)

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS