CVE Watch—

CVE-2019-0604

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

99.9%

p100

KEV

SÍ

3 nov 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.8%EPSS · 30 días99.9%

2026-08-022026-08-30

Ficha del catálogo KEV

Producto

Microsoft / SharePoint

Vulnerabilidad

Microsoft SharePoint Remote Code Execution Vulnerability

Añadido a KEV

3 nov 2021

Remediar antes de

3 may 2022

Uso conocido en ransomware

Sí

Descripción resumida

Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2019-0604

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-550409.1 CRÍ

98.5%

KEV—80Microsoft SharePoint Weak Authentication Vulnerability12d CVE-2026-586449.8 CRÍ

96.6%

KEV—79Microsoft SharePoint Deserialization of Untrusted Data Vulnerability45d CVE-2026-505229.8 CRÍ

99.7%

KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 39d CVE-2025-537709.8 CRÍ

100.0%

KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability27d CVE-2025-497066.5 MED

99.9%

KEV—80Microsoft SharePoint Improper Authentication Vulnerability27d CVE-2025-49704—

100.0%

KEV—80Microsoft SharePoint Code Injection Vulnerability—