Microsoft SharePoint Remote Code Execution Vulnerability

概要

参考情報

• securityfocus.com/bid/106914 · Broken Link
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604 · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2019-0604

sharepoint enterprise server のその他の脆弱性

• CVE-2025-54905高 7.1Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53736中 6.2Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53733高 8.4Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-49706中 6.5悪用確認済み（CISA KEV）Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
• CVE-2025-47994高 8.6Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.