Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-50522)

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.1.

Jak se o tom psalo 4

1. 22. 7. 2026 · CISA KEV US nadpis události

   Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-50522)

   CISA added CVE-2026-50522 to the Known Exploited Vulnerabilities catalog. Affected product: Microsoft SharePoint. Remediation due date: 2026-07-25.

2. 15. 7. 2026 · Zero Day Initiative US

   ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-50522.

3. 15. 7. 2026 · Zero Day Initiative US

   ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-50522.

4. 14. 7. 2026 · Microsoft Security US

   CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability

   Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.