CVE Watch—

CVE-2026-20963

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CVSS

—

Sem CVSS

EPSS

29.2%

p98

KEV

SIM

18 de mar. de 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

29.2%EPSS · 30 dias29.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / SharePoint

Vulnerabilidade

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Adicionado ao KEV

18 de mar. de 2026

Corrigir até

21 de mar. de 2026

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20963 ; https://nvd.nist.gov/vuln/detail/CVE-2026-20963

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-656608.8 ALT

94.9%

KEV—78Microsoft SharePoint Code Injection Vulnerability11d CVE-2026-550409.1 CRÍ

99.4%

KEV—80Microsoft SharePoint Weak Authentication Vulnerability79d CVE-2026-586449.8 CRÍ

96.9%

KEV—79Microsoft SharePoint Deserialization of Untrusted Data Vulnerability112d CVE-2026-505229.8 CRÍ

87.6%

KEV—76Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 105d CVE-2025-537709.8 CRÍ

100.0%

KEV—80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability94d CVE-2025-497066.5 MÉD

99.9%

KEV—80Microsoft SharePoint Improper Authentication Vulnerability94d