๐Ÿ” CVE Alert

CVE-2024-38094

HIGH 7.2 โš ๏ธ CISA KEV

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS Score
7.2
EPSS Score
0.0%
EPSS Percentile
0th

Microsoft SharePoint Remote Code Execution Vulnerability

Vendor microsoft
Product microsoft sharepoint enterprise server 2016
Ecosystems
Industries
TechnologyEnterprise
Published Jul 9, 2024
Last Updated Feb 10, 2026
โš ๏ธ Actively Exploited โ€” Act Now

Get instant alerts for microsoft microsoft sharepoint enterprise server 2016

This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2024-38094.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Microsoft / Microsoft SharePoint Enterprise Server 2016
16.0.0 < 16.0.5456.1000
Microsoft / Microsoft SharePoint Server 2019
16.0.0 < 16.0.10412.20001
Microsoft / Microsoft SharePoint Server Subscription Edition
16.0.0 < 16.0.17328.20424

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
msrc.microsoft.com: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094 cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38094