Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2024-38018

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2024-38018.

Coverage Span: 2025-07-16
Reports: 1 related reports

Associated Reports & Timeline

SharePoint Unknown CVE Unveiled: RCE via WebPart Properties Deserialization

CVE-2024-38018: SPSerializationBinder allowed binary deserialization of SafeControls classes via WebPart attached properties, enabling RCE with a crafted ysoserial payload.