CVE Watch—

CVE-2019-0604

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

99.9%

p100

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 días99.9%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Microsoft / SharePoint

Vulnerabilidad

Microsoft SharePoint Remote Code Execution Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

3 may 2022

Uso conocido en ransomware

Sí

Descripción resumida

Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2019-0604

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-656608.8 ALT

81.3%

KEV—74Microsoft SharePoint Code Injection Vulnerability19d CVE-2026-550409.1 CRÍ

99.4%

KEV—80Microsoft SharePoint Weak Authentication Vulnerability57d CVE-2026-586449.8 CRÍ

96.8%

KEV—79Microsoft SharePoint Deserialization of Untrusted Data Vulnerability90d CVE-2026-505229.8 CRÍ

87.3%

KEV—76Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 84d CVE-2025-537709.8 CRÍ

100.0%

KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability72d CVE-2025-497066.5 MED

99.9%

KEV—80Microsoft SharePoint Improper Authentication Vulnerability72d