UNKNOWNKNOWN EXPLOITED
CVE-2026-20963
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Summary
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.
References
Includes data from the CISA Known Exploited Vulnerabilities catalog.
CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.