CVE-2019-0594

HIGH 8.8CVE-2019-0594 · Published 05/03/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
sharepoint enterprise server microsoft	`= 2016`	No fix yet
sharepoint foundation microsoft	`= 2013`	No fix yet
sharepoint server microsoft	`= 2010= 2019`	No fix yet

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.

References

securityfocus.com/bid/106866 · Third Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0594 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free