CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability . Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.
- CISA KEV-listed (remediation due 2026-07-25)
- EPSS 85.4% (99.7% percentile)
- CVSS 9.8 critical