Remote Code Execution Vulnerability in Microsoft Office SharePoint
CVE-2026-65665

8.8HIGH

What is CVE-2026-65665?

CVE-2026-65665 is a critical remote code execution vulnerability found in Microsoft Office SharePoint, a widely used collaboration platform designed for document management and team collaboration. This vulnerability arises from the deserialization of untrusted data, which allows an authorized attacker to craft malicious input that could lead to the execution of arbitrary code over the network. If exploited, this could enable attackers to gain unauthorized control over affected systems, compromise sensitive information, and disrupt business operations, significantly impacting an organization’s security posture and operational integrity.

Potential impact of CVE-2026-65665

  1. Unauthorized Code Execution: The primary risk associated with CVE-2026-65665 is the potential for unauthorized code execution. Attackers who leverage this vulnerability could deploy malware, create backdoors, or execute malicious commands, leading to extensive system compromise.

  2. Data Breaches: By exploiting this vulnerability, attackers could gain access to sensitive corporate data stored within SharePoint. This access could result in data theft, leakage of confidential information, or manipulation of crucial business documents, causing substantial financial and reputational damage.

  3. Operational Disruption: The exploitation of this vulnerability could lead to significant operational disruptions. Compromised systems may face downtime, loss of productivity, and additional recovery costs, straining resources and impacting business continuity during remediation efforts.

Affected Version(s)

Microsoft SharePoint Server 2019 x64-based Systems 16.0.0 < 16.0.10417.20198

Microsoft SharePoint Server Subscription Edition x64-based Systems 16.0.0 < 16.0.19725.20522

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.