CVE-2024-21426: Microsoft SharePoint Server Remote Code Execution Vulnerability
Published Mar 12, 2024
·Updated
Microsoft SharePoint Server Remote Code Execution Vulnerability
Affected Software
9 affected componentsFixes available
Microsoft SharePoint Server 2019
Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Server 2019
Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Server
Microsoft SharePoint Server=2016
Microsoft SharePoint Server=2019
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Enterprise Server 2016
Remediation
Event History
Mar 12, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·04:57 PM
Data Sourced
via MITRE·04:57 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-21426?
CVE-2024-21426 has been rated as critical due to its potential to allow remote code execution.
2
How do I fix CVE-2024-21426?
To fix CVE-2024-21426, apply the appropriate security patches provided by Microsoft for your SharePoint version.
3
Which versions of SharePoint are affected by CVE-2024-21426?
CVE-2024-21426 affects Microsoft SharePoint Server 2019, SharePoint Enterprise Server 2016, and SharePoint Server Subscription Edition.
4
What types of vulnerabilities does CVE-2024-21426 involve?
CVE-2024-21426 is classified as a remote code execution vulnerability.
5
Is there a workaround for CVE-2024-21426?
There are no official workarounds for CVE-2024-21426, so applying the patches is the recommended course of action.