Skip to main content
عربي
logo

NCSC-VD-2607-002-01

Severity Level: Critical

Reference No.: NCSC-VD-2607-002-01

Microsoft

Description

Multiple vulnerabilities in Microsoft Office SharePoint could allow an unauthorized attacker to execute remote code and elevate privileges over a network. Organizations are advised to apply the latest Microsoft security updates to mitigate the risk.

CVE-2026-50522: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

CVE-2026-58644: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

CVE-2026-56164: Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Vulnerabilities

  • CVE-2026-50522

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  • CVE-2026-58644

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  • CVE-2026-56164

    Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

References