CISA tags Microsoft SharePoint RCE bug as actively exploited

CISA warns that attackers are now exploiting a Microsoft SharePoint code injection vulnerability that can be chained with a critical privilege escalation flaw for pre-auth remote code execution attacks. [...]

actively exploited attackers attacks auth bug can cisa code code execution code injection code injection vulnerability critical escalation exploited exploiting flaw injection microsoft microsoft sharepoint privilege privilege escalation privilege escalation flaw rce remote code remote code execution security sharepoint tags vulnerability