{"id":"CVE-2026-58644","title":"Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.","summary":"Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-502"],"vendor":"microsoft","product":"sharepoint_server","affected":["sharepoint_server < 16.0.19725.20434","sharepoint_server = 2016","sharepoint_server = 2019"],"patched":["sharepoint_server 16.0.19725.20434"],"published":"2026-07-14","updated":"2026-07-17","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-58644","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644","label":"secure@microsoft.com"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58644","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available","cve.org"],"epss":0.60944,"epssPercentile":0.99138,"kev":true,"kevDateAdded":"2026-07-16","kevDueDate":"2026-07-19","kevRansomware":false,"exploited":true,"ingestedAt":"2026-07-17T20:15:42.997Z","exploits":{"nuclei":["CVE-2026-58644"],"checkedAt":"2026-09-21T15:29:47.895Z"},"exploitAvailable":true,"ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"total","timestamp":"2026-07-16T00:00:00+00:00"},"slug":"CVE-2026-58644","body":"## Overview\n\nDeserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.\n\n## Affected\n\n- `sharepoint_server < 16.0.19725.20434`\n- `sharepoint_server = 2016`\n- `sharepoint_server = 2019`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `sharepoint_server 16.0.19725.20434`","depth":"hadal","depthScore":91,"depthScoreParts":{"impact":53.9,"likelihood":12.2,"exploitation":25,"ransomware":0},"changes":[{"seq":208505,"id":"CVE-2026-58644","ts":1790006506292,"field":"epss","old":"0.15873","new":"0.60944"},{"seq":5381,"id":"CVE-2026-58644","ts":1788887274444,"field":"exploit_available","old":"false","new":"true"},{"seq":4264,"id":"CVE-2026-58644","ts":1788886389027,"field":"exploit_available","old":"true","new":"false"},{"seq":3014,"id":"CVE-2026-58644","ts":1788883051821,"field":"exploit_available","old":"false","new":"true"},{"seq":2043,"id":"CVE-2026-58644","ts":1788882456885,"field":"exploit_available","old":"true","new":"false"},{"seq":1117,"id":"CVE-2026-58644","ts":1788881893849,"field":"exploit_available","old":"false","new":"true"},{"seq":181,"id":"CVE-2026-58644","ts":1787603668639,"field":"epss","old":"0.45478","new":"0.15873"},{"seq":131,"id":"CVE-2026-58644","ts":1786824402165,"field":"epss","old":"0.06372","new":"0.45478"}]}