CVE-2026-45659

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

76.08% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2026-07-01, used in ransomware campaigns

Published

2026-05-22

Updated

2026-08-11

Proof-of-concept exploits (1)

• HORKimhab/CVE-2026-456591★ · 2026-07-13

References

• CVE Record
• NVD entry

Related

• CVE-2026-4565
• CVE-2026-4566
• CVE-2026-4564
• CVE-2026-45665
• CVE-2026-4563
• CVE-2026-45666