Security Advisory catalog CVE-2019-0604 Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory .
cve-program · CVE-2019-0604 Published
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
Read the publisher's advisory Affected versions, risk and source history
cve-program · CVE-2019-0604 Published Microsoft SharePoint Server Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Microsoft SharePoint Server",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "2010 Service Pack 2"
},
{
"status": "affected",
"version": "2019"
}
]
} Microsoft SharePoint Foundation Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Microsoft SharePoint Foundation",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "2013 Service Pack 1"
}
]
} Microsoft SharePoint Enterprise Server Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Microsoft SharePoint Enterprise Server",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "2016"
}
]
} Original source record · Cite this exact observation · Complete original publisher JSON