The flaw is a deserialization weakness in Microsoft Office SharePoint that allows an authorized attacker to execute arbitrary code over the network. Classified as CWE-502, remote code execution gives an attacker control over the SharePoint process and potentially the underlying host, compromising confidentiality, integrity, and availability of the SharePoint server environment.

Microsoft SharePoint Server Subscription Edition is the affected product according to the CNA. No specific version information is listed, indicating that all versions of this edition may be impacted unless otherwise noted.

The CVSS score of 7.4 indicates a high severity. The EPSS score is not available, so the likelihood of exploitation cannot be quantified from the data provided. It is not listed in CISA’s KEV catalog, suggesting no publicly disclosed exploits as of this analysis. The likely attack vector is the SharePoint network interface; an attacker with authorized access can submit malicious data that is deserialized by the SharePoint service, resulting in code execution under the privileges of the SharePoint process.