CVE-2022-41036

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Microsoft SharePoint Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5365.1000
MicrosoftMicrosoft SharePoint Enterprise Server 2013 Service Pack 1>= 15.0.0, < 15.0.5493.1000
MicrosoftMicrosoft SharePoint Server 2019>= 16.0.0, < 16.0.10391.20000
MicrosoftMicrosoft SharePoint Server Subscription Edition>= 16.0.0, < 16.0.15601.20158
MicrosoftMicrosoft SharePoint Foundation 2013 Service Pack 1>= 15.0.0, < 15.0.5493.1000

References

Timeline

Published
Oct 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-410378.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-410388.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-410398.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-41045.5A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting inCVE-2022-410408.8Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-410427.4Visual Studio Code Information Disclosure VulnerabilityCVE-2022-410433.3Microsoft Office Information Disclosure VulnerabilityCVE-2022-410448.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-410457.8Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityCVE-2022-410478.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-410488.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-410495.4Windows Mark of the Web Security Feature Bypass Vulnerability