Firetruck

CVE-2026-20963

KEV
Updated Jul 30, 2026 · PUBLISHED
View KEV entry →

Description

Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft SharePoint Enterprise Server 2016Microsoft / Microsoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5535.1001affected
Microsoft SharePoint Server 2019Microsoft / Microsoft SharePoint Server 2019>= 16.0.0, < 16.0.10417.20083affected
Microsoft SharePoint Server Subscription EditionMicrosoft / Microsoft SharePoint Server Subscription Edition>= 16.0.0, < 16.0.19127.20442affected