What is CVE-2024-38094?

CVE-2024-38094 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft SharePoint Remote Code Execution Vulnerability

Which CVE IDs does CVE-2024-38094 cover?

CVE-2024-38094 covers the following CVE IDs: CVE-2024-38094. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2024-38094?

CVE-2024-38094 has a CVSS v3 base score of 7.2, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2024-38094?

CVE-2024-38094 affects 3 products, including: Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Server 2019; Microsoft SharePoint Server Subscription Edition.

CVE-2024-38094HighCVSS 7.2

Microsoft SharePoint Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

May 31, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2024-38094 →

📋 Description

According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability? An authenticated attacker with Site Owner permissions can use the vulnerability to inject arbitrary code and execute this code in the context of SharePoint Server.

🎯 Affected products3

Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019
Microsoft SharePoint Server Subscription Edition

✅ Remediation

KB5002618 (Security Update) — fixed build 16.0.5456.1000 KB5002615 (Security Update) — fixed build 16.0.10412.20001 KB5002606 (Security Update) — fixed build 16.0.17328.20424

🔗 References (7)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094
patchhttps://www.microsoft.com/download/details.aspx?familyid=92f58fc5-c39d-4a25-bea5-ddee233c734c
referencehttps://support.microsoft.com/help/5002618
patchhttps://www.microsoft.com/download/details.aspx?familyid=a981cd4e-a4a7-4b75-85c3-6708c75ec97e
referencehttps://support.microsoft.com/help/5002615
patchhttps://www.microsoft.com/download/details.aspx?familyid=79a55ec9-bad3-44c2-bd0e-843f637f43a7
referencehttps://support.microsoft.com/help/5002606