CVE-2024-38094
Microsoft SharePoint Deserialization Vulnerability
CVSS
—
Sem CVSS
EPSS
50.9%
p99
KEV
SIM
22 de out. de 2024
Exploit Today
80
0-100
Publicado: — · Última mod.: —
50.9%EPSS · 30 dias50.9%
2026-10-082026-11-05
Produto
Microsoft / SharePoint
Vulnerabilidade
Microsoft SharePoint Deserialization Vulnerability
Adicionado ao KEV
22 de out. de 2024
Corrigir até
12 de nov. de 2024
Uso conhecido em ransomware
Sim
Descrição resumida
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094 ; https://nvd.nist.gov/vuln/detail/CVE-2024-38094
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-656608.8 ALT94.9%
KEV—78Microsoft SharePoint Code Injection Vulnerability11dCVE-2026-550409.1 CRÍ99.4%
KEV—80Microsoft SharePoint Weak Authentication Vulnerability79dCVE-2026-586449.8 CRÍ96.9%
KEV—79Microsoft SharePoint Deserialization of Untrusted Data Vulnerability112dCVE-2026-505229.8 CRÍ87.6%
KEV—76Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 105dCVE-2025-537709.8 CRÍ100.0%
KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability94dCVE-2025-497066.5 MÉD99.9%
KEV—80Microsoft SharePoint Improper Authentication Vulnerability94d