CVE-2026-45659

As of 2026-05-27, CVE-2026-45659 is a CVSS 8.8 (HIGH-severity) vulnerability. EPSS exploitation probability 0.6%. Threadlinqs Intelligence tracks 14 threats exploiting it.

Last updated: 2026-05-27

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Weaknesses (CWE)

CWE-502

Threats tracking this CVE

• July 2026 Patch Tuesday: Actively Exploited SharePoint RCE (CVE-2026-58644) and AD FS/SharePoint Zero-Days — CRITICAL
• CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV Catalog — CRITICAL
• CISA Warns of Trio of Actively Exploited SharePoint Server Flaws (CVE-2026-32201, CVE-2026-45659, CVE-2026-56164) — CRITICAL
• CVE-2026-56164: Microsoft SharePoint Server Missing-Authentication Vulnerability Actively Exploited, Added to CISA KEV — CRITICAL
• CISA Warns of Active Exploitation of Three Microsoft SharePoint Server Vulnerabilities (CVE-2026-32201, CVE-2026-45659, CVE-2026-56164) — CRITICAL
• Microsoft July 2026 Patch Tuesday: Record 622 Flaws Fixed, Two Zero-Days Under Active Exploitation (CVE-2026-56164, CVE-2026-56155) — CRITICAL
• Microsoft July 2026 Patch Tuesday: 570 Flaws Fixed, 3 Zero-Days Including AD FS and SharePoint Privilege Escalation — CRITICAL
• CVE-2026-45659: Microsoft SharePoint Deserialization RCE Added to CISA KEV Despite 'Exploitation Less Likely' Rating — HIGH
• CVE-2026-45659: Microsoft SharePoint Deserialization RCE Actively Exploited, Added to CISA KEV — HIGH
• CVE-2026-45659: Microsoft SharePoint Server Deserialization RCE Actively Exploited, Added to CISA KEV — CRITICAL
• CVE-2026-45659: Microsoft SharePoint Server Deserialization RCE Added to CISA KEV — HIGH
• CVE-2026-45659: SharePoint Deserialization RCE Added to CISA KEV Amid Storm-2603 Exploitation — HIGH
• CISA KEV Addition: Microsoft SharePoint Server Deserialization RCE (CVE-2026-45659) Actively Exploited by Storm-2603 / Warlock Ransomware — CRITICAL
• Microsoft SharePoint Authenticated RCE via Deserialization of Untrusted Data (CVE-2026-45659) — HIGH

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659

← all vulnerabilities · Markdown version · Threadlinqs Intelligence

Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.