Act Now: CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security vulnerability impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The issue, tracked as CVE-2023-29357 (CVSS score: 9.8), is a privilege escalation flaw that could be exploited by an attacker to gain

act agency attacker catalog cisa critical cve cve-2023-29357 cvss cvss score cybersecurity escalation exploitation exploited exploited vulnerabilities flaw infrastructure infrastructure security issue kev known exploited known exploited vulnerabilities microsoft microsoft sharepoint privilege privilege escalation privilege escalation flaw score security security vulnerability server sharepoint vulnerabilities vulnerability