{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T16:23:59.585Z",
  "tag": {
    "id": "sharepoint",
    "label": "SharePoint",
    "isStack": false,
    "url": "https://pwn.watch/t/sharepoint",
    "feed": "https://pwn.watch/t/sharepoint/feed.xml"
  },
  "counts": {
    "incidents": 12,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 12
  },
  "incidents": [
    {
      "slug": "microsoft-sharepoint-cve-2026-65660",
      "title": "Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability",
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-65660",
      "json": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-65660.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2026-65660"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-09-25",
      "closedAt": "2026-09-25",
      "updatedAt": "2026-09-25",
      "summary": "Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network. Added to CISA KEV on 2026-09-25.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-cve-2026-55040",
      "title": "Microsoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerability",
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-55040",
      "json": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-55040.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-55040"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-08-18",
      "closedAt": "2026-08-18",
      "updatedAt": "2026-08-18",
      "summary": "Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network. Added to CISA KEV on 2026-08-18.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-cve-2026-50522",
      "title": "Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ",
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-50522",
      "json": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-50522.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-50522"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-07-22",
      "closedAt": "2026-07-22",
      "updatedAt": "2026-07-22",
      "summary": "Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-07-22.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-cve-2026-58644",
      "title": "Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability",
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-58644",
      "json": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-58644.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-58644"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-07-16",
      "closedAt": "2026-07-16",
      "updatedAt": "2026-07-16",
      "summary": "Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-07-16.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-server-cve-2026-56164",
      "title": "Microsoft SharePoint Server: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability",
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-56164",
      "json": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-56164.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint Server",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2026-56164"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-07-14",
      "closedAt": "2026-07-14",
      "updatedAt": "2026-07-14",
      "summary": "Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network. Added to CISA KEV on 2026-07-14.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-server-cve-2026-45659",
      "title": "Microsoft SharePoint Server: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability",
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-45659",
      "json": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-45659.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint Server",
      "tags": [
        "microsoft",
        "sharepoint",
        "ransomware",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-45659"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-07-01",
      "closedAt": "2026-07-01",
      "updatedAt": "2026-07-01",
      "summary": "Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network. Added to CISA KEV on 2026-07-01.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-server-cve-2026-32201",
      "title": "Microsoft SharePoint Server: Microsoft SharePoint Server Improper Input Validation Vulnerability",
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-32201",
      "json": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-32201.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint Server",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-32201"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-04-14",
      "closedAt": "2026-04-14",
      "updatedAt": "2026-04-14",
      "summary": "Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network. Added to CISA KEV on 2026-04-14.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-cve-2026-20963",
      "title": "Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability",
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-20963",
      "json": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-20963.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-20963"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-03-18",
      "closedAt": "2026-03-18",
      "updatedAt": "2026-03-18",
      "summary": "Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-03-18.",
      "xPost": null
    },
    {
      "slug": "toolshell-sharepoint-cve-2025-53770",
      "title": "ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706)",
      "url": "https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770",
      "json": "https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint Server (on-premises)",
      "tags": [
        "toolshell",
        "microsoft",
        "sharepoint",
        "zero-day",
        "rce",
        "ransomware",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-49704",
        "CVE-2025-49706",
        "CVE-2025-53770"
      ],
      "affectedVersions": [
        "On-premises SharePoint Server (see Microsoft customer guidance for the exact builds)"
      ],
      "fixedVersions": [
        "See Microsoft customer guidance for CVE-2025-53770"
      ],
      "startedAt": "2025-07-18",
      "closedAt": "2025-07-22",
      "updatedAt": "2025-07-22",
      "summary": "Unauthenticated RCE chain against on-premises SharePoint Server, mass-exploited from July 18, 2025. Microsoft observed Linen Typhoon, Violet Typhoon and Storm-2603 exploiting it; Storm-2603 deployed Warlock ransomware. Patching alone is not enough: rotate ASP.NET machine keys and restart IIS. SharePoint Online was not affected.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-cve-2024-38094",
      "title": "Microsoft SharePoint Deserialization",
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2024-38094",
      "json": "https://pwn.watch/i/microsoft-sharepoint-cve-2024-38094.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev",
        "ransomware",
        "rce"
      ],
      "cveIds": [
        "CVE-2024-38094"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-07-09",
      "closedAt": "2024-10-22",
      "updatedAt": "2024-10-22",
      "summary": "Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. Added to the CISA KEV catalog on 2024-10-22. CISA lists known use in ransomware campaigns.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-server-cve-2023-24955",
      "title": "Microsoft SharePoint Server Code Injection",
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-24955",
      "json": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-24955.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint Server",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev",
        "ransomware",
        "rce"
      ],
      "cveIds": [
        "CVE-2023-24955"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-03-26",
      "closedAt": "2024-03-26",
      "updatedAt": "2024-03-26",
      "summary": "Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely. Added to the CISA KEV catalog on 2024-03-26. CISA lists known use in ransomware campaigns. CVE-2023-24955 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "microsoft-sharepoint-server-cve-2023-29357",
      "title": "Microsoft SharePoint Server Privilege Escalation",
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-29357",
      "json": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-29357.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Microsoft SharePoint Server",
      "tags": [
        "microsoft",
        "sharepoint",
        "cisa-kev",
        "ransomware"
      ],
      "cveIds": [
        "CVE-2023-29357"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-01-10",
      "closedAt": "2024-01-10",
      "updatedAt": "2024-01-10",
      "summary": "Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges. Added to the CISA KEV catalog on 2024-01-10. CISA lists known use in ransomware campaigns. CVE-2023-29357 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "microsoft-sharepoint-cve-2026-65660",
      "incidentTitle": "Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-09-25",
      "title": "CISA added CVE-2026-65660 to the KEV catalog (due 2026-09-28).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-65660"
    },
    {
      "incident": "microsoft-sharepoint-cve-2026-55040",
      "incidentTitle": "Microsoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-08-18",
      "title": "CISA added CVE-2026-55040 to the KEV catalog (due 2026-08-21).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-55040"
    },
    {
      "incident": "microsoft-sharepoint-cve-2026-50522",
      "incidentTitle": "Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-07-22",
      "title": "CISA added CVE-2026-50522 to the KEV catalog (due 2026-07-25).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-50522"
    },
    {
      "incident": "microsoft-sharepoint-cve-2026-58644",
      "incidentTitle": "Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-07-16",
      "title": "CISA added CVE-2026-58644 to the KEV catalog (due 2026-07-19).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-58644"
    },
    {
      "incident": "microsoft-sharepoint-server-cve-2026-56164",
      "incidentTitle": "Microsoft SharePoint Server: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-07-14",
      "title": "CISA added CVE-2026-56164 to the KEV catalog (due 2026-07-17).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-56164"
    },
    {
      "incident": "microsoft-sharepoint-server-cve-2026-45659",
      "incidentTitle": "Microsoft SharePoint Server: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-07-01",
      "title": "CISA added CVE-2026-45659 to the KEV catalog (due 2026-07-04).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-45659"
    },
    {
      "incident": "microsoft-sharepoint-server-cve-2026-32201",
      "incidentTitle": "Microsoft SharePoint Server: Microsoft SharePoint Server Improper Input Validation Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-04-14",
      "title": "CISA added CVE-2026-32201 to the KEV catalog (due 2026-04-28).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2026-32201"
    },
    {
      "incident": "microsoft-sharepoint-cve-2026-20963",
      "incidentTitle": "Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-03-18",
      "title": "CISA added CVE-2026-20963 to the KEV catalog (due 2026-03-21).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2026-20963"
    },
    {
      "incident": "toolshell-sharepoint-cve-2025-53770",
      "incidentTitle": "ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-22",
      "title": "Microsoft attributes exploitation to Linen Typhoon, Violet Typhoon and Storm-2603",
      "body": "Storm-2603 deployed Warlock ransomware.",
      "sourceUrl": "https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/",
      "url": "https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770"
    },
    {
      "incident": "toolshell-sharepoint-cve-2025-53770",
      "incidentTitle": "ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-22",
      "title": "CISA adds CVE-2025-49704 and CVE-2025-49706 to KEV",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770"
    },
    {
      "incident": "toolshell-sharepoint-cve-2025-53770",
      "incidentTitle": "ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-20",
      "title": "CISA adds CVE-2025-53770 to KEV and publishes guidance",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/news-events/alerts/2025/07/20/update-microsoft-releases-guidance-exploitation-sharepoint-vulnerabilities",
      "url": "https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770"
    },
    {
      "incident": "toolshell-sharepoint-cve-2025-53770",
      "incidentTitle": "ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-19",
      "title": "Microsoft publishes customer guidance for CVE-2025-53770",
      "body": "Apply updates, enable AMSI Full Mode, deploy Defender/EDR, rotate ASP.NET machine keys and restart IIS.",
      "sourceUrl": "https://www.microsoft.com/en-us/msrc/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770",
      "url": "https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770"
    },
    {
      "incident": "toolshell-sharepoint-cve-2025-53770",
      "incidentTitle": "ToolShell: mass exploitation of on-prem SharePoint (CVE-2025-53770, CVE-2025-49704, CVE-2025-49706)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-18",
      "title": "Eye Security observes large-scale exploitation of on-prem SharePoint servers",
      "body": "Later clarified as the original ToolShell chain (CVE-2025-49706 + CVE-2025-49704).",
      "sourceUrl": "https://research.eye.security/sharepoint-under-siege/",
      "url": "https://pwn.watch/i/toolshell-sharepoint-cve-2025-53770"
    },
    {
      "incident": "microsoft-sharepoint-cve-2024-38094",
      "incidentTitle": "Microsoft SharePoint Deserialization",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-10-22",
      "title": "CISA added CVE-2024-38094 to the KEV catalog (federal deadline 2024-11-12)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2024-38094"
    },
    {
      "incident": "microsoft-sharepoint-cve-2024-38094",
      "incidentTitle": "Microsoft SharePoint Deserialization",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-09",
      "title": "CVE-2024-38094 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-38094",
      "url": "https://pwn.watch/i/microsoft-sharepoint-cve-2024-38094"
    },
    {
      "incident": "microsoft-sharepoint-server-cve-2023-24955",
      "incidentTitle": "Microsoft SharePoint Server Code Injection",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-03-26",
      "title": "CISA added CVE-2023-24955 to the KEV catalog (federal deadline 2024-04-16)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-24955"
    },
    {
      "incident": "microsoft-sharepoint-server-cve-2023-29357",
      "incidentTitle": "Microsoft SharePoint Server Privilege Escalation",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-10",
      "title": "CISA added CVE-2023-29357 to the KEV catalog (federal deadline 2024-01-31)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/microsoft-sharepoint-server-cve-2023-29357"
    }
  ]
}