This vulnerability (CVE-2024-43464) affects Microsoft SharePoint Enterprise Server 2016 version 16.0.0. It is caused by improper handling of deserialization of untrusted data, classified under CWE-502. The flaw allows remote code execution when exploited by an attacker with high privileges. The CVSS v3.1 base score is 7.2, indicating high severity, with attack vector network, low attack complexity, and no user interaction required. Microsoft has released an official fix to remediate this vulnerability.

Successful exploitation of this vulnerability could lead to complete compromise of the affected SharePoint server, including full confidentiality, integrity, and availability impact. The attacker must have high privileges to exploit the flaw remotely, but no user interaction is needed. This could result in remote code execution on the server.

An official fix is available from Microsoft. Administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43464 to remediate this vulnerability. No additional mitigation steps are required beyond applying the official patch.