An integer overflow or wraparound condition in Microsoft Office SharePoint allows an attacker who is authorized to the system to execute arbitrary code over a network. The flaw is identified as CWE-121 (stack-based buffer overflow) and CWE-190 (integer overflow). If exploited, the attacker could run code with the privileges of the SharePoint service, potentially compromising the entire server or any connected resources.

Microsoft SharePoint Server Subscription Edition is the affected product. No specific version range is provided, so any unpatched instance of this product that exposes the vulnerable component may be impacted.

The vulnerability has a CVSS score of 8.8, indicating high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, which suggests exploitation has not been widely recorded yet. The likely attack vector is a network-based exploitation by an authorized attacker who can send crafted requests to the vulnerable SharePoint instance. Successful exploitation would give the attacker code execution capabilities, enabling complete compromise of the affected server and potentially lateral movement.