CVE-2019-0604
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — SharePoint
Date Added
2021-11-03
Remediation Due
2022-05-03
Ransomware Use
CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2019-0604