← Back to feed
advisories Zero Day Initiative

ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Zero Day Initiative Microsoft

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is not required to exp...

T1190 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators CISA Advisories · Sep 23 advisories ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability Zero Day Initiative · Sep 23 advisories ZDI-26-733: Foxit PDF Reader Portfolio Directory Traversal Remote Code Execution Vulnerability Zero Day Initiative · Sep 23