{"id":"CVE-2019-0604","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-0604","generatedAt":"2026-10-28T19:05:20.481Z","title":"Microsoft SharePoint Remote Code Execution Vulnerability","description":"A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.","published":"2019-03-05T23:29:01.000Z","lastModified":"2026-06-17T02:08:31.000Z","status":"Analyzed","sourceIdentifier":"secure@microsoft.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-20"],"affected":["microsoft/sharepoint enterprise server","microsoft/sharepoint foundation","microsoft/sharepoint server"],"epss":{"score":0.99913,"percentile":0.99968,"date":"2026-10-27","history":[]},"kev":{"listed":true,"dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Known","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-0604"},"exploits":{"count":1,"verified":false,"firstPublished":"2020-01-21","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":48053,"kind":"exploit","title":"Microsoft SharePoint - Deserialization Remote Code Execution","url":"https://www.exploit-db.com/exploits/48053","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/48053.py","file":"exploits/windows/remote/48053.py","published":"2020-01-21","added":"2020-02-11","updated":"2020-02-11","author":"Voulnet","type":"remote","platform":"windows","port":null,"verified":false,"codes":["CVE-2019-0604"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 3 May 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/106914","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"secure@microsoft.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604","tags":["Patch","Vendor Advisory"],"source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/106914","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0604","tags":["US Government Resource"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-0604","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}