Live › vulnerability › CVE-2019-0604
Go to dashboardMicrosoft SharePoint fails to check the source markup of an application package, so a crafted package can be used to run code. An attacker who exploits it runs code as the SharePoint application pool and the server farm account, and the flaw is on CISA's known-exploited list with a ransomware tag.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft SharePoint | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the Microsoft SharePoint updates per vendor instructions (CISA required action); the specific patched build is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2019-0604")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.