CVE-2024-38227

—

CVSS 3.1

7.2 high

EPSS

8%p95

Published

Sep 10, 2024 (Sep 10, 2024)

Modified

Jun 17, 2026

Description

Microsoft SharePoint Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: sharepoint server
Weakness: CWE-77
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.2%)

In the news2 stories

Microsoft fixes 4 exploited zero-days and a code defect that nixed earlier security fixes

Help Net SecuritySep 12, 14:09 UTC · Sep 12, 2024Exploit / PoC in the wildCVE-2024-38217 CVE-2024-38226 CVE-2024-38014+6 CVEs1

60

Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score

Cisco TalosSep 10, 19:30 UTC · Sep 10, 2024Vulnerability in the wildCVE-2024-38226 CVE-2024-38014 CVE-2024-38217+6 CVEs

60