The vulnerability is a deserialization flaw in Microsoft Office SharePoint that permits an attacker with authorized access to supply malicious payloads and execute arbitrary code over the network. This can lead to full compromise of the SharePoint server, exposing sensitive data, allowing lateral movement, and potentially impacting other applications connected to the same infrastructure. The weakness is identified as CWE‑502.

Affected Microsoft SharePoint products include SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. No specific version ranges are listed in the CNA data, so all releases of these products are potentially vulnerable.

The CVSS base score of 8.8 indicates a high severity vulnerability. EPSS is not available, and the issue is not listed in the CISA KEV catalog, suggesting no publicly known exploits yet. The likely attack vector is through network traffic to a SharePoint instance; an authorized user or an adversary who has gained authorized access can inject unsafe serialized data, triggering the flaw. Because it requires authorized access, the risk is moderate in a well‑controlled environment but serious if privilege escalation is achieved.