Firetruck

CVE-2024-38094

KEV · Ransomware
Updated Feb 10, 2026 · PUBLISHED
View KEV entry →

Description

Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft SharePoint Enterprise Server 2016Microsoft / Microsoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5456.1000affected
Microsoft SharePoint Server 2019Microsoft / Microsoft SharePoint Server 2019>= 16.0.0, < 16.0.10412.20001affected
Microsoft SharePoint Server Subscription EditionMicrosoft / Microsoft SharePoint Server Subscription Edition>= 16.0.0, < 16.0.17328.20424affected