CISA tags Microsoft SharePoint RCE bug as actively exploited

Published on March 27, 2024

CISA warns that attackers are now exploiting a Microsoft SharePoint code injection vulnerability that can be chained with a critical privilege escalation flaw for pre-auth remote code execution attacks. [...]