CVE Watch—

CVE-2019-0604

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

99.9%

p100

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 dias99.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / SharePoint

Vulnerabilidade

Microsoft SharePoint Remote Code Execution Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

3 de mai. de 2022

Uso conhecido em ransomware

Sim

Descrição resumida

Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2019-0604

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-656608.8 ALT

94.9%

KEV—78Microsoft SharePoint Code Injection Vulnerability10d CVE-2026-550409.1 CRÍ

99.4%

KEV—80Microsoft SharePoint Weak Authentication Vulnerability79d CVE-2026-586449.8 CRÍ

96.9%

KEV—79Microsoft SharePoint Deserialization of Untrusted Data Vulnerability112d CVE-2026-505229.8 CRÍ

87.6%

KEV—76Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 105d CVE-2025-537709.8 CRÍ

100.0%

KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability94d CVE-2025-497066.5 MÉD

99.9%

KEV—80Microsoft SharePoint Improper Authentication Vulnerability94d