What the vulnerability does
01Description
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-29357
CRITICAL
CVE-2023-29357: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVSS base score
9.8/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA mandated remediation
02CISA Required Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Key dates
03Disclosure timeline
June 13, 2023
CVE published
October 21, 2025
Record updated
External resources
04References
NVD — National Vulnerability Database
https://nvd.nist.gov/vuln/detail/CVE-2023-29357
CWE — Common Weakness Enumeration
https://cwe.mitre.org/data/definitions/303.html
CISA KEV Reference
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023…
CISA KEV Reference
https://nvd.nist.gov/vuln/detail/CVE-2023-29357
Related vulnerabilities
05Related CVE
CVE-2023-31211 Disabled automation users could still authenticate
CVE-2023-4641 Shadow-utils: possible password leak during passwd(1) change
CVE-2022-41985
CVE-2024-26248 Windows Kerberos Elevation of Privilege Vulnerability
CVE-2025-13390 WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
