---
id: 7366
title: "Phân tích lỗ hổng CVE-2022-22005 Microsoft Sharepoint RCE"
cve: CVE-2022-22005
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cve-2022-22005-microsoft-sharepoint-rce/"
published_at: "2022-02-27T17:02:00Z"
tags: ["rce", "microsoft", "deserialization", "sharepoint", "patch-analysis", "cve-2022-22005"]
phying_url: "https://phying.com/item/7366"
lang: en
---

# Phân tích lỗ hổng CVE-2022-22005 Microsoft Sharepoint RCE

## Summary

A patch-diff analysis of CVE-2022-22005 (CVSS 8.8), a SharePoint RCE, tracing Microsoft's fix to a serialization binder restricting types during ChartPreviewImage.loadChartImage() deserialization.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2022-22005
- **Published:** 2022-02-27T17:02:00Z
- **Original:** https://blog.viettelcybersecurity.com/cve-2022-22005-microsoft-sharepoint-rce/
- **Phying News:** https://phying.com/item/7366