[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-50522":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-22T20:44:10.849Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":26,"downstream":27,"duplicates":28,"related":29,"reserved_at":9,"published_at":30,"modified_at":31,"state":32,"summary":33,"references_raw":43,"kevs":57,"epss":68,"epss_history":71,"metrics":180,"affected":188},"CVE-2026-50522","Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-502","Deserialization of Untrusted Data","The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","weakness","Draft","Base","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-586","Object Injection",[],[],[],[],[],[],[],"2026-07-14T17:05:27.656Z","2026-08-20T17:01:47.046Z","Analyzed",{"cisa_kev":34,"cisa_ransomware":35,"cisa_vendor":36,"epss_severity":37,"epss_score":38,"severity":37,"severity_score":39,"severity_version":40,"severity_source":41,"severity_vector":42,"severity_status":32},true,false,"Microsoft","critical",0.76981,9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",[44,51],{"url":45,"sources":46,"tags":48},"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522",[41,47],"nvd",[49,50],"Vendor Advisory","Patch",{"url":52,"sources":53,"tags":54},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-50522",[41,47],[55,56],"Government Resource","US Government Resource",[58],{"source":59,"vendor":36,"product":60,"date_added":61,"vulnerability_name":62,"short_description":63,"required_action":64,"due_date":65,"known_ransomware_campaign_use":66,"notes":67,"exploitation_type":9},"cisa","SharePoint","2026-07-22","Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ","Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-07-25","Unknown","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-50522",{"date":69,"score":38,"percentile":70},"2026-08-22",0.99512,[72,76,80,83,86,89,92,95,97,101,105,107,110,112,115,118,122,126,129,131,133,135,137,140,143,146,148,150,153,156,159,161,164,167,169,171,174,177,179],{"date":73,"score":74,"percentile":75},"2026-07-15",0.1972,0.97096,{"date":77,"score":78,"percentile":79},"2026-07-16",0.20346,0.97192,{"date":81,"score":78,"percentile":82},"2026-07-17",0.97194,{"date":84,"score":78,"percentile":85},"2026-07-18",0.97196,{"date":87,"score":78,"percentile":88},"2026-07-19",0.97197,{"date":90,"score":78,"percentile":91},"2026-07-20",0.97202,{"date":93,"score":78,"percentile":94},"2026-07-21",0.97203,{"date":61,"score":78,"percentile":96},0.97214,{"date":98,"score":99,"percentile":100},"2026-07-23",0.21044,0.97319,{"date":102,"score":103,"percentile":104},"2026-07-24",0.57101,0.9897,{"date":65,"score":103,"percentile":106},0.98971,{"date":108,"score":103,"percentile":109},"2026-07-26",0.98974,{"date":111,"score":103,"percentile":109},"2026-07-27",{"date":113,"score":103,"percentile":114},"2026-07-28",0.98975,{"date":116,"score":103,"percentile":117},"2026-07-29",0.98973,{"date":119,"score":120,"percentile":121},"2026-07-30",0.62545,0.99106,{"date":123,"score":124,"percentile":125},"2026-07-31",0.7576,0.99473,{"date":127,"score":124,"percentile":128},"2026-08-01",0.99474,{"date":130,"score":124,"percentile":128},"2026-08-02",{"date":132,"score":124,"percentile":128},"2026-08-03",{"date":134,"score":124,"percentile":128},"2026-08-04",{"date":136,"score":124,"percentile":128},"2026-08-05",{"date":138,"score":124,"percentile":139},"2026-08-06",0.99475,{"date":141,"score":124,"percentile":142},"2026-08-07",0.99476,{"date":144,"score":38,"percentile":145},"2026-08-08",0.99503,{"date":147,"score":38,"percentile":145},"2026-08-09",{"date":149,"score":38,"percentile":145},"2026-08-10",{"date":151,"score":38,"percentile":152},"2026-08-11",0.99504,{"date":154,"score":38,"percentile":155},"2026-08-12",0.99505,{"date":157,"score":38,"percentile":158},"2026-08-13",0.99506,{"date":160,"score":38,"percentile":158},"2026-08-14",{"date":162,"score":38,"percentile":163},"2026-08-15",0.99508,{"date":165,"score":38,"percentile":166},"2026-08-16",0.99509,{"date":168,"score":38,"percentile":163},"2026-08-17",{"date":170,"score":38,"percentile":166},"2026-08-18",{"date":172,"score":38,"percentile":173},"2026-08-19",0.9951,{"date":175,"score":38,"percentile":176},"2026-08-20",0.99511,{"date":178,"score":38,"percentile":176},"2026-08-21",{"date":69,"score":38,"percentile":70},[181,185],{"source":41,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":182,"cvss_v4_0":9},{"baseScore":39,"baseSeverity":183,"vectorString":42,"impactScore":39,"exploitabilityScore":184},"CRITICAL",10,{"source":47,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":186,"cvss_v4_0":9},{"baseScore":39,"baseSeverity":183,"vectorString":187,"impactScore":39,"exploitabilityScore":184},"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[189,201,208,215],{"ecosystem":9,"name":190,"vendor":191,"product":192,"cpe_part":193,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":194},"Microsoft SharePoint Enterprise Server 2016","microsoft","microsoft sharepoint enterprise server 2016","a",[195],{"version":196,"is_range":34,"range_type":41,"version_start":197,"version_start_type":198,"version_end":199,"version_end_type":200,"fixed_in":9},">= 16.0.0, \u003C 16.0.5561.1001","16.0.0","including","16.0.5561.1001","excluding",{"ecosystem":9,"name":202,"vendor":191,"product":203,"cpe_part":193,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":204},"Microsoft SharePoint Server 2019","microsoft sharepoint server 2019",[205],{"version":206,"is_range":34,"range_type":41,"version_start":197,"version_start_type":198,"version_end":207,"version_end_type":200,"fixed_in":9},">= 16.0.0, \u003C 16.0.10417.20175","16.0.10417.20175",{"ecosystem":9,"name":209,"vendor":191,"product":210,"cpe_part":193,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":211},"Microsoft SharePoint Server Subscription Edition","microsoft sharepoint server subscription edition",[212],{"version":213,"is_range":34,"range_type":41,"version_start":197,"version_start_type":198,"version_end":214,"version_end_type":200,"fixed_in":9},">= 16.0.0, \u003C 16.0.19725.20434","16.0.19725.20434",{"ecosystem":9,"name":216,"vendor":191,"product":217,"cpe_part":193,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":218},"SharePoint Server","sharepoint_server",[219,222,224],{"version":220,"is_range":34,"range_type":221,"version_start":9,"version_start_type":9,"version_end":214,"version_end_type":200,"fixed_in":9},"lt16.0.19725.20434","cpe",{"version":223,"is_range":35,"range_type":221,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2016",{"version":225,"is_range":35,"range_type":221,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2019"]