CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability . Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.

• CISA KEV-listed (remediation due 2026-07-25)
• EPSS 75.8% (99.5% percentile)
• CVSS 9.8 critical

Related briefings

• Four SharePoint flaws joined CISA's exploited list in July 2026-08-03

Browse the CVE database

Read the full analysis on IntelFusions