Skip to main content
Apexward Pulse
Type Vulnerability

Microsoft · Code execution

Microsoft Office SharePoint Remote Code Execution Vulnerability

1 sourceCVE-2026-109472

At a glance

Low
30-day window, from the last update
None observed
Evidence-weighted, not popularity
Why Low

Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.

Briefing

  • IT leaders should assess whether Microsoft Office SharePoint is in their estate and review associated security configurations.

Questions to ask IT

  • Do we run Microsoft Office and Microsoft SharePoint, and which versions?
  • Is any of it reachable from the internet?
  • If it is not yet patched, what mitigation is in place, and will the fix be done by 10 Dec?

Next steps

  1. Confirm whether this affects systems or suppliers in your estate

Summary

  • Microsoft Office SharePoint has a vulnerability that allows an authorised attacker to execute code over a network through deserialisation of untrusted data.
  • A vulnerability in Microsoft Office SharePoint could enable remote code execution if an attacker exploits deserialisation of untrusted data.
  • The vulnerability involves CVE-2026-109472 and relates to deserialisation of untrusted data in

Read the original reportMicrosoft Security Update Guide RSS(opens in a new tab)

Products and services involved

Pulse

Last change 59m ago · Next recheck 11 Nov 2026, 19:03 UK time

  1. Story10 Nov 2026, 19:03 UK time · 59m ago

    Linked reporting from Microsoft Security Update Guide RSS (vendor psirt).

    Read source (Microsoft Security Update Guide RSS)

1 entry so far. The timeline chart appears once this story has more history.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline60% confidence

    Microsoft Office SharePoint Remote Code Execution Vulnerability

  • ProbableSummary fact75% confidence

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorised attacker to execute code over a network.

  • ConfirmedCVE identifier95% confidence

    Event involves CVE-2026-109472