CVE-2024-38094
Microsoft SharePoint Deserialization Vulnerability
CVSS
—
Sin CVSS
EPSS
50.9%
p99
KEV
SÍ
22 oct 2024
Exploit Today
80
0-100
Publicado: — · Última mod.: —
48.7%EPSS · 30 días50.9%
2026-08-022026-08-30
Producto
Microsoft / SharePoint
Vulnerabilidad
Microsoft SharePoint Deserialization Vulnerability
Añadido a KEV
22 oct 2024
Remediar antes de
12 nov 2024
Uso conocido en ransomware
Sí
Descripción resumida
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.
Acción requerida
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094 ; https://nvd.nist.gov/vuln/detail/CVE-2024-38094
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-550409.1 CRÍ98.5%
KEV—80Microsoft SharePoint Weak Authentication Vulnerability12dCVE-2026-586449.8 CRÍ96.6%
KEV—79Microsoft SharePoint Deserialization of Untrusted Data Vulnerability45dCVE-2026-505229.8 CRÍ99.7%
KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 39dCVE-2025-537709.8 CRÍ100.0%
KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability27dCVE-2025-497066.5 MED99.9%
KEV—80Microsoft SharePoint Improper Authentication Vulnerability27dCVE-2025-49704—100.0%
KEV—80Microsoft SharePoint Code Injection Vulnerability—