This vulnerability (CVE-2026-45484) affects Microsoft SharePoint Enterprise Server 2016 (version 16.0.0). It arises from improper deserialization of untrusted data, which can be exploited by an authorized attacker to elevate privileges remotely. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges at the level of an authorized user, no user interaction, and high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability as documented in their security update guide.

An authorized attacker can exploit this vulnerability remotely to elevate privileges, potentially gaining higher access rights than intended. This can lead to full compromise of the affected SharePoint server's confidentiality, integrity, and availability.

An official fix is available from Microsoft. Administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45484 to remediate this vulnerability.