CVE-2026-45659

KEV High · CVSS 8.8

Microsoft Office SharePoint — Deserialization of untrusted data RCE (CWE-502)

CVSS: 8.8; nvd
EPSS: —
KEV: Listed; 2026-07-01
Class: other; CWE-502

Description

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Search profile — drives PoC discovery

Symbols deserializationBinaryFormatterObjectStateFormatterLosFormatterSharePointSPWebSPSite/_vti_bin//_layouts/ExecuteAssemblyTypeConfuseDelegate

Keywords CVE-2026-45659SharePoint deserialization RCESharePoint untrusted data deserializationSharePoint remote code executionSharePoint CWE-502 PoCMicrosoft Office SharePoint exploitSharePoint authorized attacker RCE network

Versions: See MSRC advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659 for affected versions

Ranked PoCs (5) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

HORKimhab/CVE-2026-45659 needs review

recent activity

gh_search

★ 0
amnsecurity/CVE-2026-45659-SharePoint-RCE needs review

recent activity

gh_search · Python

★ 0
jenniferreire26/CVE-2026-45659 needs review

recent activity

gh_search

★ 0
mistbarbarianspot/CVE-2026-45659-SharePoint-RCE needs review

recent activity

gh_search

★ 0
harryhaxor/CVE-2025-53770-SharePoint-Deserialization-RCE-PoC needs review

gh_search

★ 1

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-02T00:00:43.000Z · profiled 2026-07-02T00:30:43.000Z