CVE-2024-38094
Microsoft SharePoint Deserialization Vulnerability
CVSS
—
Sin CVSS
EPSS
50.9%
p99
KEV
SÍ
22 oct 2024
Exploit Today
80
0-100
Publicado: — · Última mod.: —
50.9%EPSS · 30 días50.9%
2026-09-162026-10-14
Producto
Microsoft / SharePoint
Vulnerabilidad
Microsoft SharePoint Deserialization Vulnerability
Añadido a KEV
22 oct 2024
Remediar antes de
12 nov 2024
Uso conocido en ransomware
Sí
Descripción resumida
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.
Acción requerida
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094 ; https://nvd.nist.gov/vuln/detail/CVE-2024-38094
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-656608.8 ALT81.3%
KEV—74Microsoft SharePoint Code Injection Vulnerability19dCVE-2026-550409.1 CRÍ99.4%
KEV—80Microsoft SharePoint Weak Authentication Vulnerability57dCVE-2026-586449.8 CRÍ96.8%
KEV—79Microsoft SharePoint Deserialization of Untrusted Data Vulnerability90dCVE-2026-505229.8 CRÍ87.3%
KEV—76Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 84dCVE-2025-537709.8 CRÍ100.0%
KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability72dCVE-2025-497066.5 MED99.9%
KEV—80Microsoft SharePoint Improper Authentication Vulnerability72d