CVE-2024-38094

Microsoft SharePoint Remote Code Execution Vulnerability

Basic Information

CVE State: PUBLISHED
Reserved Date: June 11, 2024
Published Date: July 09, 2024
Last Updated: March 11, 2025
Vendor: Microsoft
Product: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Description: Microsoft SharePoint Remote Code Execution Vulnerability

CVSS Scores

CVSS v3.1

7.2 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (added 2024-10-22 00:00:00 UTC) Source
Used in Malware: Yes (added 2024-10-22 00:00:00 UTC) Source

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094

Known Exploited Vulnerability Information

Source	Added Date
CISA	2024-10-22 00:00:00 UTC