Zero Day Monitor
DashboardVulnerabilitiesTrendingZero-DaysNews
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
883 articles · 106207 vulns · 36/50 feeds (7d)
← Back to list
8.8
CVE-2026-20963KEV

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Description

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected Products

VendorProductVersions
microsoftsharepoint_server< 16.0.19127.20442

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20963(Vendor Advisory)
  • https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20963(US Government Resource)

Related News (1 articles)

Tier B
CERT-FR2d ago
Bulletin d'actualité CERTFR-2026-ACT-012 (23 mars 2026)
→ No new info (linked only)
CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA KEV✅ Yes
Actively exploited✅ Yes
CWECWE-502
Published1/13/2026
Last enriched6h ago
Trending Score70
Source articles1
Independent1
Info Completeness10/14
Missing: epss, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Pin to Dashboard

Verification

State: verified
Confidence: 100%