This vulnerability, tracked as CVE-2024-43466 and classified under CWE-502 (Deserialization of Untrusted Data), affects Microsoft SharePoint Enterprise Server 2016 version 16.0.0. It allows an attacker with low privileges to exploit improper deserialization of untrusted data, resulting in denial of service (DoS). The CVSS v3.1 base score is 6.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged confidentiality and integrity, but high impact on availability. Microsoft has released an official fix for this vulnerability.

Successful exploitation results in denial of service, causing disruption of the SharePoint service availability. There is no impact on confidentiality or integrity according to the CVSS vector. The vulnerability requires low privileges and can be exploited remotely over the network without user interaction.

An official fix is available from Microsoft. Users of Microsoft SharePoint Enterprise Server 2016 version 16.0.0 should apply the vendor-provided patch as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43466. No additional mitigation steps are indicated by the vendor.