CVE-2023-21742

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Microsoft SharePoint Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
MicrosoftMicrosoft SharePoint Enterprise Server 2016>= 16.0.0, < 16.0.5378.1000
MicrosoftMicrosoft SharePoint Enterprise Server 2013 Service Pack 1>= 15.0.0, < 15.0.5519.1000
MicrosoftMicrosoft SharePoint Server 2019>= 16.0.0, < 16.0.10394.20021
MicrosoftMicrosoft SharePoint Server Subscription Edition>= 16.0.0, < 16.0.15601.20418
MicrosoftMicrosoft SharePoint Foundation 2013 Service Pack 1>= 15.0.0, < 15.0.5519.1000

References

Timeline

Published
Jan 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-217435.3Microsoft SharePoint Server Security Feature Bypass VulnerabilityCVE-2023-217448.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2023-217458.0Microsoft Exchange Server Spoofing VulnerabilityCVE-2023-217467.8Windows NTLM Elevation of Privilege VulnerabilityCVE-2023-217477.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217487.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217497.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217507.1Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-217516.5Azure DevOps Server Spoofing VulnerabilityCVE-2023-217527.1Windows Backup Service Elevation of Privilege VulnerabilityCVE-2023-217535.5Event Tracing for Windows Information Disclosure VulnerabilityCVE-2023-217547.8Windows Kernel Elevation of Privilege Vulnerability