CVE-2021-34520
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS
8.1
High
EPSS
4.4%
p90
KEV
—
Exploit Today
27
0-100
Published: Jul 14, 2021 · Last modified: Aug 10, 2026 · CWE-502
3.1%EPSS · 30 days4.4%
2026-07-142026-08-11
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-18634——
——0An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affected component.9hCVE-2026-483978.6 HIG—
——0Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.9hCVE-2026-703218.8 HIG—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8hCVE-2026-668088.8 HIG—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8hCVE-2026-668058.8 HIG—
——0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.8hCVE-2026-658158.8 HIG—
——0Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.8h