An authorizing user with network access can exploit unsafe deserialization of untrusted data in Microsoft Office SharePoint, which may allow arbitrary code execution on affected SharePoint servers. The weakness is classified as CWE‑502, reflecting insecure deserialization. The vulnerability can enable the attacker to compromise confidentiality, integrity, and availability of the SharePoint instance by running code with the privileges of the web service process.

Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, and Microsoft SharePoint Server Subscription Edition are listed as affected products. No specific version exclusions were provided, so all current builds of these products are considered vulnerable.

The CVSS score of 8.8 indicates a high severity vulnerability, although EPSS data is unavailable and the issue is not currently listed in the CISA KEV catalogue. The likely attack surface requires an authenticated attacker who can initiate network traffic to the SharePoint server; thus the threat is confined to users with legitimate credentials or privileged administrative channels. Still, the high CVSS suggests that once exploitation is achieved, the attacker can take full control of the server environment.